| Server IP : 104.21.84.107 / Your IP : 104.23.197.208 Web Server : Apache/2.4.63 (Ubuntu) System : Linux adminpruebas-Virtual-Machine 6.14.0-37-generic #37-Ubuntu SMP PREEMPT_DYNAMIC Fri Nov 14 22:10:32 UTC 2025 x86_64 User : www-data ( 33) PHP Version : 8.4.5 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /var/log/eset/eei/ |
Upload File : |
Version: 2.8.5555 (Oct 13 2025 18:38:28) Compiled with: Clang Version: 18.1.3 Npm: 10.8.2 HardwareInfo: CPU: IntelXeon, cores: 240, RAM: 7GB TelemetryId: Server d38ecbca8f660598256b227c9815089ffeddc553 2026-03-27 00:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2542 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 497 KB; ModuleInfoCache: 424 KB; CacheEntry: 354 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 176 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 73 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34326 KB; 2026-03-27 00:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2543 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 543 KB; ModuleInfoCache: 424 KB; CacheEntry: 354 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 176 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 90 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34410 KB; 2026-03-27 00:02:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 23:55:03, To:, 2026-03-27 00:02:02, Duration (s):, 419, Events Per Second:, 0.545, Events:, 229, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 218, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29541 2026-03-27 00:02:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s764ms. 2026-03-27 00:02:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 00:02:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 00:02:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 00:02:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 00:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 467 KB; ModuleInfoCache: 424 KB; CacheEntry: 354 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 176 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 91 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34303 KB; 2026-03-27 00:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 468 KB; ModuleInfoCache: 424 KB; CacheEntry: 354 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 176 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 91 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34305 KB; 2026-03-27 00:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 471 KB; ModuleInfoCache: 424 KB; CacheEntry: 354 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 176 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 89 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34347 KB; 2026-03-27 00:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 00:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2543 KB; ProcessInfo: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 424 KB; CacheEntry: 354 KB; rules::ProcessConditionsCache: 304 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 176 KB; BaseEvent: 99 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34940 KB; 2026-03-27 00:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2543 KB; ProcessInfo: 831 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 424 KB; CacheEntry: 354 KB; TcpIpConnectionsManager: 289 KB; BaseEvent: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 65 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35029 KB; 2026-03-27 00:07:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 00:07:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 00:07:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 00:07:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 00:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2546 KB; ProcessInfo: 831 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 425 KB; CacheEntry: 355 KB; TcpIpConnectionsManager: 287 KB; BaseEvent: 190 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 65 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35032 KB; 2026-03-27 00:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2546 KB; ProcessInfo: 831 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 425 KB; CacheEntry: 355 KB; TcpIpConnectionsManager: 192 KB; BaseEvent: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 65 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34938 KB; 2026-03-27 00:09:02 7967594126c0 Info: Events Statistics, From:, 2026-03-27 00:02:26, To:, 2026-03-27 00:09:02, Duration (s):, 396, Events Per Second:, 2.721, Events:, 1080, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 825, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 44, Livegrid:, 44, OriginUrl:, 0, Alarms:, 166, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 119761 2026-03-27 00:09:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s966ms. 2026-03-27 00:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 426 KB; ProcessInfo: 396 KB; CacheEntry: 356 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 131 KB; rules::ProcessConditionsCache: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34204 KB; 2026-03-27 00:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 00:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 426 KB; ProcessInfo: 396 KB; CacheEntry: 356 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 131 KB; rules::ProcessConditionsCache: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34204 KB; 2026-03-27 00:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2554 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 427 KB; CacheEntry: 357 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 177 KB; BaseEvent: 169 KB; BatchSerializer::EventsQueueTag: 60 KB; rules::ProcessConditionsCache: 47 KB; ProcessInfoCommandLineTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35138 KB; 2026-03-27 00:12:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 00:12:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 00:12:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 00:12:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 00:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2554 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 427 KB; CacheEntry: 357 KB; TcpIpConnectionsManager: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 177 KB; BaseEvent: 170 KB; BatchSerializer::EventsQueueTag: 60 KB; rules::ProcessConditionsCache: 46 KB; ProcessInfoCommandLineTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35149 KB; 2026-03-27 00:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2554 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 427 KB; CacheEntry: 357 KB; TcpIpConnectionsManager: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 177 KB; BaseEvent: 170 KB; BatchSerializer::EventsQueueTag: 60 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35156 KB; 2026-03-27 00:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2554 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 427 KB; CacheEntry: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 177 KB; BaseEvent: 175 KB; TcpIpConnectionsManager: 157 KB; BatchSerializer::EventsQueueTag: 63 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35046 KB; 2026-03-27 00:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 00:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2554 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 427 KB; CacheEntry: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 177 KB; BaseEvent: 177 KB; TcpIpConnectionsManager: 154 KB; BatchSerializer::EventsQueueTag: 63 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35059 KB; 2026-03-27 00:16:02 7967594126c0 Info: Events Statistics, From:, 2026-03-27 00:05:53, To:, 2026-03-27 00:16:02, Duration (s):, 609, Events Per Second:, 2.443, Events:, 1490, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1382, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 107, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 173585 2026-03-27 00:16:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s987ms. 2026-03-27 00:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 427 KB; ProcessInfo: 425 KB; CacheEntry: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 154 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34249 KB; 2026-03-27 00:17:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 00:17:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 00:17:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 00:17:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 00:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2575 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 459 KB; ModuleInfoCache: 431 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 179 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 67 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34341 KB; 2026-03-27 00:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 490 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 83 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34446 KB; 2026-03-27 00:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 497 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 91 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34478 KB; 2026-03-27 00:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 00:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 589 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 503 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 89 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34480 KB; 2026-03-27 00:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 503 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 139 KB; rules::ProcessConditionsCache: 89 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34471 KB; 2026-03-27 00:22:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 00:22:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 00:22:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 00:22:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 00:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 506 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 96 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34489 KB; 2026-03-27 00:23:02 7967594126c0 Info: Events Statistics, From:, 2026-03-27 00:16:07, To:, 2026-03-27 00:23:02, Duration (s):, 415, Events Per Second:, 0.748, Events:, 311, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 210, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 50, Livegrid:, 50, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38409 2026-03-27 00:23:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s668ms. 2026-03-27 00:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 408 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 90 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34309 KB; 2026-03-27 00:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 412 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 139 KB; rules::ProcessConditionsCache: 93 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34322 KB; 2026-03-27 00:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 00:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 415 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 139 KB; rules::ProcessConditionsCache: 93 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34328 KB; 2026-03-27 00:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 415 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 121 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34355 KB; 2026-03-27 00:27:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 00:27:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 00:27:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 00:27:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 00:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 415 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 207 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 131 KB; rules::ProcessConditionsCache: 123 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34399 KB; 2026-03-27 00:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 420 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 133 KB; rules::ProcessConditionsCache: 123 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34431 KB; 2026-03-27 00:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 430 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 146 KB; rules::ProcessConditionsCache: 123 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34427 KB; 2026-03-27 00:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 00:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:30:02 7967594126c0 Info: Events Statistics, From:, 2026-03-27 00:23:45, To:, 2026-03-27 00:30:02, Duration (s):, 377, Events Per Second:, 0.286, Events:, 108, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 67, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 20, Livegrid:, 20, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13927 2026-03-27 00:30:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s430ms. 2026-03-27 00:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 450 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 207 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 177 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34562 KB; 2026-03-27 00:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 450 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; TcpIpConnectionsManager: 182 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; cloudutils::CloudData: 179 KB; rules::ProcessConditionsCache: 128 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BaseEvent: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34420 KB; 2026-03-27 00:32:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 00:32:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 00:32:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 00:32:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 00:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 456 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 144 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34445 KB; 2026-03-27 00:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 477 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; TcpIpConnectionsManager: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 179 KB; rules::ProcessConditionsCache: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34476 KB; 2026-03-27 00:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 480 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 161 KB; rules::ProcessConditionsCache: 130 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34455 KB; 2026-03-27 00:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 00:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 484 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 130 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34477 KB; 2026-03-27 00:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 514 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 169 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34622 KB; 2026-03-27 00:37:02 7967594126c0 Info: Events Statistics, From:, 2026-03-27 00:30:02, To:, 2026-03-27 00:37:02, Duration (s):, 420, Events Per Second:, 0.708, Events:, 298, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 263, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 17, Livegrid:, 17, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35133 2026-03-27 00:37:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s895ms. 2026-03-27 00:37:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 00:37:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 00:37:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 00:37:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 00:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 431 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 164 KB; rules::ProcessConditionsCache: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34392 KB; 2026-03-27 00:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 431 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 131 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34393 KB; 2026-03-27 00:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 445 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 161 KB; rules::ProcessConditionsCache: 148 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34470 KB; 2026-03-27 00:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 00:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 477 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 178 KB; rules::ProcessConditionsCache: 135 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34516 KB; 2026-03-27 00:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 493 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 178 KB; rules::ProcessConditionsCache: 157 KB; TcpIpConnectionsManager: 134 KB; BaseEvent: 77 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34567 KB; 2026-03-27 00:42:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 00:42:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 00:42:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 00:42:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 00:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 537 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; cloudutils::CloudData: 178 KB; rules::ProcessConditionsCache: 175 KB; TcpIpConnectionsManager: 174 KB; BaseEvent: 97 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34673 KB; 2026-03-27 00:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 537 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 172 KB; rules::ProcessConditionsCache: 170 KB; BaseEvent: 98 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34676 KB; 2026-03-27 00:44:02 7967594126c0 Info: Events Statistics, From:, 2026-03-27 00:37:08, To:, 2026-03-27 00:44:02, Duration (s):, 414, Events Per Second:, 1.268, Events:, 526, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 275, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 119, Livegrid:, 119, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56671 2026-03-27 00:44:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s208ms. 2026-03-27 00:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2581 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 452 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 174 KB; rules::ProcessConditionsCache: 172 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34463 KB; 2026-03-27 00:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 00:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2581 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 456 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 177 KB; rules::ProcessConditionsCache: 170 KB; TcpIpConnectionsManager: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34429 KB; 2026-03-27 00:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2581 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 458 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 177 KB; rules::ProcessConditionsCache: 170 KB; TcpIpConnectionsManager: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34436 KB; 2026-03-27 00:47:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 00:47:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 00:47:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 00:47:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 00:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; ProcessInfo: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 431 KB; rules::ProcessConditionsCache: 401 KB; CacheEntry: 362 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 177 KB; BaseEvent: 105 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35116 KB; 2026-03-27 00:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; TcpIpConnectionsManager: 339 KB; rules::ProcessConditionsCache: 264 KB; BaseEvent: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 177 KB; BatchSerializer::EventsQueueTag: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35488 KB; 2026-03-27 00:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; TcpIpConnectionsManager: 362 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 300 KB; BaseEvent: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 177 KB; BatchSerializer::EventsQueueTag: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35579 KB; 2026-03-27 00:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 00:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; ProcessInfo: 956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; TcpIpConnectionsManager: 279 KB; rules::ProcessConditionsCache: 273 KB; BaseEvent: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 177 KB; BatchSerializer::EventsQueueTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35478 KB; 2026-03-27 00:51:02 7967594126c0 Info: Events Statistics, From:, 2026-03-27 00:44:14, To:, 2026-03-27 00:51:02, Duration (s):, 408, Events Per Second:, 3.340, Events:, 1366, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1149, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 214, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 153734 2026-03-27 00:51:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s984ms. 2026-03-27 00:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 514 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 169 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34639 KB; 2026-03-27 00:52:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 00:52:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 00:52:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 00:52:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 00:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; ProcessInfo: 616 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; rules::ProcessConditionsCache: 380 KB; CacheEntry: 362 KB; TcpIpConnectionsManager: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 177 KB; BaseEvent: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34922 KB; 2026-03-27 00:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; TcpIpConnectionsManager: 312 KB; rules::ProcessConditionsCache: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; BaseEvent: 182 KB; cloudutils::CloudData: 177 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35376 KB; 2026-03-27 00:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; TcpIpConnectionsManager: 328 KB; rules::ProcessConditionsCache: 326 KB; BaseEvent: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 177 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35524 KB; 2026-03-27 00:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 00:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; rules::ProcessConditionsCache: 385 KB; CacheEntry: 362 KB; TcpIpConnectionsManager: 308 KB; BaseEvent: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 177 KB; BatchSerializer::EventsQueueTag: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35658 KB; 2026-03-27 00:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; ProcessInfo: 997 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; rules::ProcessConditionsCache: 385 KB; CacheEntry: 362 KB; BaseEvent: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 177 KB; BatchSerializer::EventsQueueTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35549 KB; 2026-03-27 00:57:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 00:57:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 00:57:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 00:57:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 00:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; ProcessInfo: 997 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; rules::ProcessConditionsCache: 383 KB; CacheEntry: 362 KB; BaseEvent: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 154 KB; BatchSerializer::EventsQueueTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35518 KB; 2026-03-27 00:58:02 7967594126c0 Info: Events Statistics, From:, 2026-03-27 00:51:11, To:, 2026-03-27 00:58:02, Duration (s):, 411, Events Per Second:, 3.248, Events:, 1338, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1118, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 219, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 150458 2026-03-27 00:58:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s005ms. 2026-03-27 00:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 402 KB; rules::ProcessConditionsCache: 383 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34606 KB; 2026-03-27 00:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 408 KB; rules::ProcessConditionsCache: 394 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 139 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34636 KB; 2026-03-27 00:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 00:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 00:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 445 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 164 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34354 KB; 2026-03-27 01:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 446 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34314 KB; 2026-03-27 01:02:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 01:02:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 01:02:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 01:02:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 01:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 449 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34319 KB; 2026-03-27 01:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 169 KB; rules::ProcessConditionsCache: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34397 KB; 2026-03-27 01:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 146 KB; rules::ProcessConditionsCache: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34381 KB; 2026-03-27 01:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 01:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:05:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 00:58:33, To:, 2026-03-27 01:05:02, Duration (s):, 389, Events Per Second:, 0.531, Events:, 207, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 187, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26893 2026-03-27 01:05:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s700ms. 2026-03-27 01:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 427 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 144 KB; rules::ProcessConditionsCache: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34309 KB; 2026-03-27 01:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 428 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34303 KB; 2026-03-27 01:07:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 01:07:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 01:07:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 01:07:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 01:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 430 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34307 KB; 2026-03-27 01:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 431 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34309 KB; 2026-03-27 01:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 477 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 74 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34395 KB; 2026-03-27 01:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 01:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 483 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 133 KB; rules::ProcessConditionsCache: 76 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34406 KB; 2026-03-27 01:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 486 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 78 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34403 KB; 2026-03-27 01:12:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 01:05:12, To:, 2026-03-27 01:12:03, Duration (s):, 411, Events Per Second:, 0.404, Events:, 166, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 165, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21955 2026-03-27 01:12:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s850ms. 2026-03-27 01:12:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 01:12:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 01:12:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 01:12:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 01:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 450 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 74 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34351 KB; 2026-03-27 01:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 480 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 105 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34437 KB; 2026-03-27 01:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 481 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 107 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34448 KB; 2026-03-27 01:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 01:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 486 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 149 KB; rules::ProcessConditionsCache: 109 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34450 KB; 2026-03-27 01:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 711 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 490 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 138 KB; rules::ProcessConditionsCache: 115 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34593 KB; 2026-03-27 01:17:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 01:17:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 01:17:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 01:17:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 01:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 793 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 493 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 138 KB; rules::ProcessConditionsCache: 116 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34686 KB; 2026-03-27 01:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 773 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 493 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 111 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34657 KB; 2026-03-27 01:19:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 01:12:11, To:, 2026-03-27 01:19:03, Duration (s):, 412, Events Per Second:, 0.291, Events:, 120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 105, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15973 2026-03-27 01:19:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s692ms. 2026-03-27 01:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 734 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 431 KB; ProcessInfo: 405 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 109 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34498 KB; 2026-03-27 01:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 01:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 431 KB; ProcessInfo: 411 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 115 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34488 KB; 2026-03-27 01:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 704 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 434 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 144 KB; rules::ProcessConditionsCache: 142 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34553 KB; 2026-03-27 01:22:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 01:22:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 01:22:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 01:22:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 01:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2582 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 685 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 434 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 140 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34530 KB; 2026-03-27 01:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2584 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 481 KB; ModuleInfoCache: 431 KB; CacheEntry: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 177 KB; rules::ProcessConditionsCache: 168 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34574 KB; 2026-03-27 01:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2584 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 533 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 178 KB; BaseEvent: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34745 KB; 2026-03-27 01:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 01:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2584 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 223 KB; TcpIpConnectionsManager: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 178 KB; BaseEvent: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34750 KB; 2026-03-27 01:26:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 01:19:10, To:, 2026-03-27 01:26:03, Duration (s):, 413, Events Per Second:, 1.012, Events:, 418, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 322, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 43, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48606 2026-03-27 01:26:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s821ms. 2026-03-27 01:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2584 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 492 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 164 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34590 KB; 2026-03-27 01:27:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 01:27:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 01:27:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 01:27:13 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 01:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2584 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 493 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34565 KB; 2026-03-27 01:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2584 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 615 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 493 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34567 KB; 2026-03-27 01:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2587 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 494 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34583 KB; 2026-03-27 01:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 01:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2589 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 531 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 151 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34703 KB; 2026-03-27 01:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2589 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 531 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 151 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34692 KB; 2026-03-27 01:32:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 01:32:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 01:32:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 01:32:13 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 01:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2589 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 534 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 154 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34673 KB; 2026-03-27 01:33:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 01:26:29, To:, 2026-03-27 01:33:03, Duration (s):, 394, Events Per Second:, 0.297, Events:, 117, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 104, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 10, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15881 2026-03-27 01:33:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s555ms. 2026-03-27 01:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2589 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 434 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 139 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34540 KB; 2026-03-27 01:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2589 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 462 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 283 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 207 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34627 KB; 2026-03-27 01:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 01:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2589 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 465 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 144 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34628 KB; 2026-03-27 01:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2589 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 468 KB; ModuleInfoCache: 432 KB; CacheEntry: 362 KB; rules::ProcessConditionsCache: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 146 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34661 KB; 2026-03-27 01:37:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 01:37:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 01:37:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 01:37:13 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 01:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2590 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 494 KB; ModuleInfoCache: 432 KB; CacheEntry: 363 KB; rules::ProcessConditionsCache: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 149 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34717 KB; 2026-03-27 01:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2590 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 589 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 432 KB; CacheEntry: 363 KB; rules::ProcessConditionsCache: 340 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 162 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34775 KB; 2026-03-27 01:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2592 KB; ProcessInfo: 591 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 432 KB; rules::ProcessConditionsCache: 366 KB; CacheEntry: 363 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 170 KB; BaseEvent: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34921 KB; 2026-03-27 01:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 01:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:40:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 01:33:30, To:, 2026-03-27 01:40:03, Duration (s):, 393, Events Per Second:, 1.130, Events:, 444, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 389, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 46, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52967 2026-03-27 01:40:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s851ms. 2026-03-27 01:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2592 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 592 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 503 KB; ModuleInfoCache: 432 KB; rules::ProcessConditionsCache: 376 KB; CacheEntry: 363 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 161 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34756 KB; 2026-03-27 01:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2592 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 517 KB; ModuleInfoCache: 432 KB; rules::ProcessConditionsCache: 374 KB; CacheEntry: 363 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 177 KB; TcpIpConnectionsManager: 157 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34739 KB; 2026-03-27 01:42:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 01:42:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 01:42:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 01:42:13 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 01:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2592 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 541 KB; ModuleInfoCache: 432 KB; rules::ProcessConditionsCache: 402 KB; CacheEntry: 363 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 159 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34818 KB; 2026-03-27 01:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2592 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; ModuleInfoCache: 432 KB; rules::ProcessConditionsCache: 398 KB; CacheEntry: 363 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 157 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34815 KB; 2026-03-27 01:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2593 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; ProcessInfo: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 432 KB; rules::ProcessConditionsCache: 429 KB; CacheEntry: 363 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 156 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34893 KB; 2026-03-27 01:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 01:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2593 KB; ProcessInfo: 597 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 432 KB; CacheEntry: 363 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 62 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34580 KB; 2026-03-27 01:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2595 KB; ProcessInfo: 647 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 177 KB; rules::ProcessConditionsCache: 109 KB; BaseEvent: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34731 KB; 2026-03-27 01:47:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 01:40:06, To:, 2026-03-27 01:47:03, Duration (s):, 417, Events Per Second:, 0.974, Events:, 406, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 340, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 55, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47687 2026-03-27 01:47:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s926ms. 2026-03-27 01:47:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 01:47:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 01:47:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 01:47:13 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 01:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2595 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 477 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 109 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34460 KB; 2026-03-27 01:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2595 KB; ProcessInfo: 650 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; rules::ProcessConditionsCache: 291 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; cloudutils::CloudData: 178 KB; BaseEvent: 79 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34983 KB; 2026-03-27 01:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2595 KB; ProcessInfo: 843 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; TcpIpConnectionsManager: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 178 KB; BaseEvent: 174 KB; rules::ProcessConditionsCache: 96 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35151 KB; 2026-03-27 01:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 01:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2595 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; TcpIpConnectionsManager: 320 KB; BaseEvent: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 178 KB; BatchSerializer::EventsQueueTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35406 KB; 2026-03-27 01:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2595 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; TcpIpConnectionsManager: 302 KB; rules::ProcessConditionsCache: 277 KB; BaseEvent: 219 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 178 KB; BatchSerializer::EventsQueueTag: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35531 KB; 2026-03-27 01:52:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 01:52:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 01:52:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 01:52:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 01:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2595 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; BaseEvent: 223 KB; TcpIpConnectionsManager: 216 KB; rules::ProcessConditionsCache: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 178 KB; BatchSerializer::EventsQueueTag: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35345 KB; 2026-03-27 01:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2595 KB; ProcessInfo: 994 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; rules::ProcessConditionsCache: 238 KB; BaseEvent: 227 KB; TcpIpConnectionsManager: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 178 KB; BatchSerializer::EventsQueueTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35419 KB; 2026-03-27 01:54:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 01:47:34, To:, 2026-03-27 01:54:03, Duration (s):, 389, Events Per Second:, 3.588, Events:, 1396, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1190, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 205, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 156569 2026-03-27 01:54:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s944ms. 2026-03-27 01:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2595 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 487 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; rules::ProcessConditionsCache: 233 KB; TcpIpConnectionsManager: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 178 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34624 KB; 2026-03-27 01:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 01:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2595 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 500 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; TcpIpConnectionsManager: 193 KB; rules::ProcessConditionsCache: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; cloudutils::CloudData: 178 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34579 KB; 2026-03-27 01:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2595 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 506 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; rules::ProcessConditionsCache: 199 KB; TcpIpConnectionsManager: 190 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 178 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34600 KB; 2026-03-27 01:57:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 01:57:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 01:57:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 01:57:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 01:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2596 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 530 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; rules::ProcessConditionsCache: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 172 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34655 KB; 2026-03-27 01:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2596 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 531 KB; ModuleInfoCache: 433 KB; CacheEntry: 363 KB; rules::ProcessConditionsCache: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 178 KB; TcpIpConnectionsManager: 144 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34633 KB; 2026-03-27 01:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2603 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; ProcessInfo: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 364 KB; rules::ProcessConditionsCache: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 179 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34904 KB; 2026-03-27 01:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 01:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 01:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2603 KB; ProcessInfo: 591 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 364 KB; rules::ProcessConditionsCache: 238 KB; TcpIpConnectionsManager: 185 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 179 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34782 KB; 2026-03-27 02:01:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 01:54:05, To:, 2026-03-27 02:01:03, Duration (s):, 418, Events Per Second:, 0.844, Events:, 353, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 338, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43681 2026-03-27 02:01:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s611ms. 2026-03-27 02:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2603 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 462 KB; ModuleInfoCache: 434 KB; CacheEntry: 364 KB; rules::ProcessConditionsCache: 235 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 179 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34578 KB; 2026-03-27 02:02:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 02:02:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 02:02:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 02:02:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 02:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2603 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 465 KB; ModuleInfoCache: 434 KB; CacheEntry: 364 KB; rules::ProcessConditionsCache: 237 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 177 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34580 KB; 2026-03-27 02:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2603 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 490 KB; ModuleInfoCache: 434 KB; CacheEntry: 364 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34623 KB; 2026-03-27 02:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2603 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 494 KB; ModuleInfoCache: 434 KB; CacheEntry: 364 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34673 KB; 2026-03-27 02:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 02:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2603 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 499 KB; ModuleInfoCache: 434 KB; CacheEntry: 364 KB; rules::ProcessConditionsCache: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34689 KB; 2026-03-27 02:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2603 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 500 KB; ModuleInfoCache: 434 KB; CacheEntry: 364 KB; rules::ProcessConditionsCache: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 138 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34683 KB; 2026-03-27 02:07:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 02:07:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 02:07:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 02:07:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 02:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2603 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 434 KB; CacheEntry: 364 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 159 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34717 KB; 2026-03-27 02:08:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 02:00:57, To:, 2026-03-27 02:08:03, Duration (s):, 426, Events Per Second:, 0.408, Events:, 174, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 159, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22508 2026-03-27 02:08:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s667ms. 2026-03-27 02:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2603 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 500 KB; ModuleInfoCache: 434 KB; CacheEntry: 364 KB; rules::ProcessConditionsCache: 346 KB; TcpIpConnectionsManager: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 179 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34787 KB; 2026-03-27 02:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2604 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; TcpIpConnectionsManager: 326 KB; rules::ProcessConditionsCache: 296 KB; BaseEvent: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 179 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35476 KB; 2026-03-27 02:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 02:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2604 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 611 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; rules::ProcessConditionsCache: 333 KB; TcpIpConnectionsManager: 325 KB; BaseEvent: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 179 KB; BatchSerializer::EventsQueueTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35574 KB; 2026-03-27 02:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2604 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; rules::ProcessConditionsCache: 324 KB; TcpIpConnectionsManager: 292 KB; BaseEvent: 213 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 179 KB; BatchSerializer::EventsQueueTag: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35523 KB; 2026-03-27 02:12:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 02:12:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 02:12:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 02:12:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 02:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2604 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; rules::ProcessConditionsCache: 326 KB; BaseEvent: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 159 KB; BatchSerializer::EventsQueueTag: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35398 KB; 2026-03-27 02:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2604 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; rules::ProcessConditionsCache: 355 KB; BaseEvent: 229 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 146 KB; BatchSerializer::EventsQueueTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35442 KB; 2026-03-27 02:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2604 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; rules::ProcessConditionsCache: 353 KB; BaseEvent: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 156 KB; BatchSerializer::EventsQueueTag: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35466 KB; 2026-03-27 02:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 02:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:15:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 02:08:09, To:, 2026-03-27 02:15:03, Duration (s):, 414, Events Per Second:, 3.379, Events:, 1399, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1184, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 208, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 158685 2026-03-27 02:15:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s988ms. 2026-03-27 02:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 442 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; rules::ProcessConditionsCache: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 157 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34656 KB; 2026-03-27 02:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 443 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; rules::ProcessConditionsCache: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 149 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34662 KB; 2026-03-27 02:17:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 02:17:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 02:17:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 02:17:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 02:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 446 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; rules::ProcessConditionsCache: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 179 KB; TcpIpConnectionsManager: 134 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34653 KB; 2026-03-27 02:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2606 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 471 KB; ModuleInfoCache: 434 KB; rules::ProcessConditionsCache: 385 KB; CacheEntry: 365 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 143 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34738 KB; 2026-03-27 02:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2606 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 478 KB; ModuleInfoCache: 434 KB; rules::ProcessConditionsCache: 387 KB; CacheEntry: 365 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34758 KB; 2026-03-27 02:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 02:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2606 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 502 KB; ModuleInfoCache: 434 KB; rules::ProcessConditionsCache: 396 KB; CacheEntry: 365 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 166 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34807 KB; 2026-03-27 02:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2606 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 508 KB; ModuleInfoCache: 434 KB; rules::ProcessConditionsCache: 396 KB; CacheEntry: 365 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 162 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34803 KB; 2026-03-27 02:22:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 02:14:59, To:, 2026-03-27 02:22:03, Duration (s):, 424, Events Per Second:, 0.604, Events:, 256, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 226, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 25, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31984 2026-03-27 02:22:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s257ms. 2026-03-27 02:22:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 02:22:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 02:22:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 02:22:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 02:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2606 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 453 KB; ModuleInfoCache: 434 KB; rules::ProcessConditionsCache: 420 KB; CacheEntry: 365 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 167 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34754 KB; 2026-03-27 02:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2606 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 500 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 180 KB; rules::ProcessConditionsCache: 146 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34587 KB; 2026-03-27 02:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2607 KB; ProcessInfo: 640 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; TcpIpConnectionsManager: 254 KB; rules::ProcessConditionsCache: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 180 KB; BaseEvent: 79 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34889 KB; 2026-03-27 02:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 02:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2607 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; TcpIpConnectionsManager: 354 KB; BaseEvent: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 180 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35253 KB; 2026-03-27 02:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2607 KB; ProcessInfo: 1145 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 456 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; BaseEvent: 324 KB; rules::ProcessConditionsCache: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 180 KB; BatchSerializer::EventsQueueTag: 87 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36039 KB; 2026-03-27 02:27:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 02:27:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 02:27:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 02:27:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 02:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2607 KB; ProcessInfo: 1223 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; rules::ProcessConditionsCache: 402 KB; TcpIpConnectionsManager: 389 KB; CacheEntry: 365 KB; BaseEvent: 363 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 180 KB; BatchSerializer::EventsQueueTag: 98 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36188 KB; 2026-03-27 02:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2607 KB; ProcessInfo: 1235 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; rules::ProcessConditionsCache: 413 KB; BaseEvent: 365 KB; CacheEntry: 365 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 180 KB; BatchSerializer::EventsQueueTag: 99 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36106 KB; 2026-03-27 02:29:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 02:22:18, To:, 2026-03-27 02:29:03, Duration (s):, 405, Events Per Second:, 5.300, Events:, 2147, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1807, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 337, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 239386 2026-03-27 02:29:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s474ms. 2026-03-27 02:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2607 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; ProcessInfo: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; rules::ProcessConditionsCache: 400 KB; CacheEntry: 365 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; cloudutils::CloudData: 180 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34874 KB; 2026-03-27 02:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 02:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2607 KB; ProcessInfo: 599 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 589 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 169 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34509 KB; 2026-03-27 02:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2607 KB; ProcessInfo: 600 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 179 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34518 KB; 2026-03-27 02:32:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 02:32:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 02:32:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 02:32:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 02:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2607 KB; ProcessInfo: 635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 180 KB; rules::ProcessConditionsCache: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34607 KB; 2026-03-27 02:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2607 KB; ProcessInfo: 685 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; cloudutils::CloudData: 180 KB; rules::ProcessConditionsCache: 169 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34851 KB; 2026-03-27 02:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2609 KB; ProcessInfo: 709 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 180 KB; rules::ProcessConditionsCache: 88 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34787 KB; 2026-03-27 02:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 02:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2609 KB; ProcessInfo: 721 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; TcpIpConnectionsManager: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 180 KB; rules::ProcessConditionsCache: 89 KB; BaseEvent: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34790 KB; 2026-03-27 02:36:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 02:29:02, To:, 2026-03-27 02:36:03, Duration (s):, 421, Events Per Second:, 0.990, Events:, 417, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 390, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 50436 2026-03-27 02:36:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s835ms. 2026-03-27 02:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2609 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 483 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; TcpIpConnectionsManager: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 180 KB; rules::ProcessConditionsCache: 90 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34499 KB; 2026-03-27 02:37:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 02:37:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 02:37:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 02:37:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 02:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2609 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 682 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 489 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 99 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34561 KB; 2026-03-27 02:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2609 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; ProcessInfo: 590 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; rules::ProcessConditionsCache: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 179 KB; BaseEvent: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34805 KB; 2026-03-27 02:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2609 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; TcpIpConnectionsManager: 318 KB; BaseEvent: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 179 KB; rules::ProcessConditionsCache: 143 KB; BatchSerializer::EventsQueueTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35421 KB; 2026-03-27 02:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 02:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2609 KB; ProcessInfo: 1039 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 434 KB; CacheEntry: 365 KB; TcpIpConnectionsManager: 359 KB; BaseEvent: 254 KB; rules::ProcessConditionsCache: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 179 KB; BatchSerializer::EventsQueueTag: 71 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35743 KB; 2026-03-27 02:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2610 KB; ProcessInfo: 1089 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; CacheEntry: 365 KB; TcpIpConnectionsManager: 331 KB; rules::ProcessConditionsCache: 303 KB; BaseEvent: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 179 KB; BatchSerializer::EventsQueueTag: 78 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35822 KB; 2026-03-27 02:42:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 02:42:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 02:42:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 02:42:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 02:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2610 KB; ProcessInfo: 1136 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; CacheEntry: 365 KB; rules::ProcessConditionsCache: 323 KB; BaseEvent: 297 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; cloudutils::CloudData: 180 KB; BatchSerializer::EventsQueueTag: 84 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35796 KB; 2026-03-27 02:43:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 02:36:27, To:, 2026-03-27 02:43:03, Duration (s):, 396, Events Per Second:, 4.655, Events:, 1844, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1560, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 8, Livegrid:, 8, OriginUrl:, 0, Alarms:, 267, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 208592 2026-03-27 02:43:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s479ms. 2026-03-27 02:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 521 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 350 KB; TcpIpConnectionsManager: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 180 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34782 KB; 2026-03-27 02:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 524 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 180 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34771 KB; 2026-03-27 02:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 02:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; ProcessInfo: 577 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; rules::ProcessConditionsCache: 407 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 169 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34904 KB; 2026-03-27 02:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; ProcessInfo: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; rules::ProcessConditionsCache: 414 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 159 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34929 KB; 2026-03-27 02:47:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 02:47:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 02:47:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 02:47:16 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 02:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; ProcessInfo: 583 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; rules::ProcessConditionsCache: 412 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 161 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34937 KB; 2026-03-27 02:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; ProcessInfo: 584 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; rules::ProcessConditionsCache: 409 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 139 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34916 KB; 2026-03-27 02:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; ProcessInfo: 586 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; rules::ProcessConditionsCache: 412 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 139 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34929 KB; 2026-03-27 02:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 02:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:50:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 02:43:19, To:, 2026-03-27 02:50:03, Duration (s):, 404, Events Per Second:, 0.695, Events:, 281, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 251, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 25, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35837 2026-03-27 02:50:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s471ms. 2026-03-27 02:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 591 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 455 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 180 KB; rules::ProcessConditionsCache: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34434 KB; 2026-03-27 02:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 458 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 180 KB; rules::ProcessConditionsCache: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34409 KB; 2026-03-27 02:52:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 02:52:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 02:52:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 02:52:16 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 02:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 483 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; TcpIpConnectionsManager: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 180 KB; rules::ProcessConditionsCache: 68 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34484 KB; 2026-03-27 02:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 486 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 157 KB; rules::ProcessConditionsCache: 75 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34466 KB; 2026-03-27 02:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 489 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34449 KB; 2026-03-27 02:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 02:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 517 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 97 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34527 KB; 2026-03-27 02:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 161 KB; rules::ProcessConditionsCache: 128 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34619 KB; 2026-03-27 02:57:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 02:50:03, To:, 2026-03-27 02:57:03, Duration (s):, 420, Events Per Second:, 0.688, Events:, 289, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 253, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 33, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38244 2026-03-27 02:57:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s981ms. 2026-03-27 02:57:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 02:57:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 02:57:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 02:57:16 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 02:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 458 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 159 KB; rules::ProcessConditionsCache: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34462 KB; 2026-03-27 02:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 458 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34478 KB; 2026-03-27 02:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 459 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34472 KB; 2026-03-27 02:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 02:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 02:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; cloudutils::CloudData: 180 KB; rules::ProcessConditionsCache: 139 KB; TcpIpConnectionsManager: 134 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34515 KB; 2026-03-27 03:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 521 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; cloudutils::CloudData: 180 KB; rules::ProcessConditionsCache: 148 KB; TcpIpConnectionsManager: 138 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34576 KB; 2026-03-27 03:02:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 03:02:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 03:02:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 03:02:16 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 03:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; ProcessInfo: 586 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 164 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34782 KB; 2026-03-27 03:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; ProcessInfo: 915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; TcpIpConnectionsManager: 305 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; BaseEvent: 203 KB; cloudutils::CloudData: 180 KB; rules::ProcessConditionsCache: 170 KB; BatchSerializer::EventsQueueTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35384 KB; 2026-03-27 03:04:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 02:56:57, To:, 2026-03-27 03:04:03, Duration (s):, 426, Events Per Second:, 3.344, Events:, 1425, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1205, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 217, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 159720 2026-03-27 03:04:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s376ms. 2026-03-27 03:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; TcpIpConnectionsManager: 328 KB; rules::ProcessConditionsCache: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 180 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35174 KB; 2026-03-27 03:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 03:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; TcpIpConnectionsManager: 308 KB; rules::ProcessConditionsCache: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 180 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35162 KB; 2026-03-27 03:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; ProcessInfo: 868 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35043 KB; 2026-03-27 03:07:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 03:07:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 03:07:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 03:07:17 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 03:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35079 KB; 2026-03-27 03:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 151 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35093 KB; 2026-03-27 03:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 589 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 304 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 164 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35230 KB; 2026-03-27 03:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 03:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; ProcessInfo: 1006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 591 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 341 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 167 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35321 KB; 2026-03-27 03:11:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 03:04:31, To:, 2026-03-27 03:11:03, Duration (s):, 392, Events Per Second:, 1.010, Events:, 396, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 357, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48847 2026-03-27 03:11:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s225ms. 2026-03-27 03:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 512 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 166 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34749 KB; 2026-03-27 03:12:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 03:12:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 03:12:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 03:12:17 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 03:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 514 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 343 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34734 KB; 2026-03-27 03:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 518 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34743 KB; 2026-03-27 03:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2614 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 519 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 138 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34737 KB; 2026-03-27 03:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 03:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2614 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34747 KB; 2026-03-27 03:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2614 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 525 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 138 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34752 KB; 2026-03-27 03:17:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 03:17:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 03:17:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 03:17:17 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 03:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2614 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 552 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 361 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 162 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34814 KB; 2026-03-27 03:18:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 03:11:12, To:, 2026-03-27 03:18:03, Duration (s):, 411, Events Per Second:, 0.285, Events:, 117, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 116, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15824 2026-03-27 03:18:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s000ms. 2026-03-27 03:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2614 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; ProcessInfo: 428 KB; CacheEntry: 366 KB; rules::ProcessConditionsCache: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 161 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34652 KB; 2026-03-27 03:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2615 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 455 KB; ModuleInfoCache: 435 KB; rules::ProcessConditionsCache: 379 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 172 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34744 KB; 2026-03-27 03:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 03:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2615 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 592 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 461 KB; ModuleInfoCache: 435 KB; rules::ProcessConditionsCache: 381 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 149 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34739 KB; 2026-03-27 03:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2615 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 497 KB; ModuleInfoCache: 435 KB; rules::ProcessConditionsCache: 414 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 167 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34832 KB; 2026-03-27 03:22:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 03:22:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 03:22:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 03:22:17 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 03:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2615 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 167 KB; BaseEvent: 39 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34494 KB; 2026-03-27 03:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2615 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 167 KB; BaseEvent: 40 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34506 KB; 2026-03-27 03:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2615 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 435 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 146 KB; BaseEvent: 41 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34492 KB; 2026-03-27 03:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 03:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:25:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 03:18:41, To:, 2026-03-27 03:25:03, Duration (s):, 382, Events Per Second:, 0.874, Events:, 334, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 283, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 46, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40078 2026-03-27 03:25:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s231ms. 2026-03-27 03:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2615 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; ProcessInfo: 428 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34365 KB; 2026-03-27 03:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2615 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; ProcessInfo: 428 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34369 KB; 2026-03-27 03:27:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 03:27:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 03:27:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 03:27:17 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 03:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2615 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; ProcessInfo: 430 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34390 KB; 2026-03-27 03:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2615 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 435 KB; ProcessInfo: 431 KB; CacheEntry: 366 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 180 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 68 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34391 KB; 2026-03-27 03:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2682 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 444 KB; ProcessInfo: 431 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 184 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34482 KB; 2026-03-27 03:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 03:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2682 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 447 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 184 KB; TcpIpConnectionsManager: 141 KB; rules::ProcessConditionsCache: 83 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34527 KB; 2026-03-27 03:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2682 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 184 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 110 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34595 KB; 2026-03-27 03:32:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 03:24:58, To:, 2026-03-27 03:32:03, Duration (s):, 425, Events Per Second:, 0.294, Events:, 125, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 113, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17284 2026-03-27 03:32:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s670ms. 2026-03-27 03:32:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 03:32:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 03:32:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 03:32:17 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 03:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2682 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 444 KB; ProcessInfo: 439 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; cloudutils::CloudData: 184 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 107 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34560 KB; 2026-03-27 03:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 486 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 184 KB; TcpIpConnectionsManager: 179 KB; rules::ProcessConditionsCache: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34668 KB; 2026-03-27 03:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 490 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 184 KB; TcpIpConnectionsManager: 172 KB; rules::ProcessConditionsCache: 138 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34675 KB; 2026-03-27 03:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 03:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 494 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 184 KB; TcpIpConnectionsManager: 172 KB; rules::ProcessConditionsCache: 134 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34678 KB; 2026-03-27 03:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 184 KB; rules::ProcessConditionsCache: 160 KB; TcpIpConnectionsManager: 152 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34736 KB; 2026-03-27 03:37:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 03:37:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 03:37:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 03:37:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 03:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 184 KB; rules::ProcessConditionsCache: 160 KB; TcpIpConnectionsManager: 149 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34740 KB; 2026-03-27 03:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; cloudutils::CloudData: 184 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 160 KB; TcpIpConnectionsManager: 149 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34694 KB; 2026-03-27 03:39:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 03:32:27, To:, 2026-03-27 03:39:03, Duration (s):, 396, Events Per Second:, 0.651, Events:, 258, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 229, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32073 2026-03-27 03:39:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s730ms. 2026-03-27 03:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 589 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 475 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 184 KB; rules::ProcessConditionsCache: 166 KB; TcpIpConnectionsManager: 138 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34615 KB; 2026-03-27 03:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 03:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 592 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 481 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 184 KB; rules::ProcessConditionsCache: 170 KB; TcpIpConnectionsManager: 139 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34637 KB; 2026-03-27 03:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 483 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 184 KB; rules::ProcessConditionsCache: 175 KB; TcpIpConnectionsManager: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34633 KB; 2026-03-27 03:42:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 03:42:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 03:42:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 03:42:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 03:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 489 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 184 KB; rules::ProcessConditionsCache: 177 KB; TcpIpConnectionsManager: 139 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34649 KB; 2026-03-27 03:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 511 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 184 KB; rules::ProcessConditionsCache: 183 KB; TcpIpConnectionsManager: 162 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34696 KB; 2026-03-27 03:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 512 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 185 KB; rules::ProcessConditionsCache: 184 KB; TcpIpConnectionsManager: 164 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34712 KB; 2026-03-27 03:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 03:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 541 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 170 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34797 KB; 2026-03-27 03:46:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 03:39:10, To:, 2026-03-27 03:46:03, Duration (s):, 413, Events Per Second:, 0.716, Events:, 296, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 281, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37762 2026-03-27 03:46:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s707ms. 2026-03-27 03:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 444 KB; ProcessInfo: 440 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34628 KB; 2026-03-27 03:47:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 03:47:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 03:47:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 03:47:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 03:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; ProcessInfo: 682 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 185 KB; BaseEvent: 114 KB; rules::ProcessConditionsCache: 54 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34961 KB; 2026-03-27 03:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; ProcessInfo: 997 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 444 KB; rules::ProcessConditionsCache: 412 KB; CacheEntry: 376 KB; TcpIpConnectionsManager: 369 KB; BaseEvent: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 205 KB; cloudutils::CloudData: 185 KB; BatchSerializer::EventsQueueTag: 70 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35956 KB; 2026-03-27 03:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; ProcessInfo: 1338 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 591 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 508 KB; ModuleInfoCache: 444 KB; BaseEvent: 436 KB; rules::ProcessConditionsCache: 381 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 185 KB; BatchSerializer::EventsQueueTag: 113 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36616 KB; 2026-03-27 03:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 03:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; ProcessInfo: 1440 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 593 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 485 KB; TcpIpConnectionsManager: 454 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 185 KB; BatchSerializer::EventsQueueTag: 127 KB; rules::ProcessConditionsCache: 89 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36432 KB; 2026-03-27 03:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; ProcessInfo: 1443 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 486 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; TcpIpConnectionsManager: 328 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 185 KB; BatchSerializer::EventsQueueTag: 128 KB; rules::ProcessConditionsCache: 86 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36296 KB; 2026-03-27 03:52:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 03:52:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 03:52:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 03:52:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 03:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; ProcessInfo: 1446 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 488 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 185 KB; BatchSerializer::EventsQueueTag: 129 KB; rules::ProcessConditionsCache: 93 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36176 KB; 2026-03-27 03:53:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 03:46:11, To:, 2026-03-27 03:53:03, Duration (s):, 412, Events Per Second:, 6.610, Events:, 2725, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2255, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 469, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 302344 2026-03-27 03:53:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s830ms. 2026-03-27 03:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 444 KB; ProcessInfo: 437 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 152 KB; rules::ProcessConditionsCache: 116 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34544 KB; 2026-03-27 03:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 462 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 159 KB; rules::ProcessConditionsCache: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34605 KB; 2026-03-27 03:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 03:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 489 KB; ModuleInfoCache: 444 KB; CacheEntry: 376 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 184 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 147 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34665 KB; 2026-03-27 03:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 515 KB; ModuleInfoCache: 445 KB; CacheEntry: 376 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 177 KB; rules::ProcessConditionsCache: 165 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34728 KB; 2026-03-27 03:57:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 03:57:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 03:57:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 03:57:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 03:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 589 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 541 KB; ModuleInfoCache: 445 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 180 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34807 KB; 2026-03-27 03:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 541 KB; ModuleInfoCache: 445 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; rules::ProcessConditionsCache: 191 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 157 KB; BaseEvent: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34789 KB; 2026-03-27 03:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 591 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; ModuleInfoCache: 445 KB; CacheEntry: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 146 KB; BaseEvent: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34791 KB; 2026-03-27 03:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 03:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 03:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:00:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 03:53:00, To:, 2026-03-27 04:00:03, Duration (s):, 423, Events Per Second:, 0.919, Events:, 389, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 342, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 44, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47424 2026-03-27 04:00:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s833ms. 2026-03-27 04:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 593 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; ProcessInfo: 440 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 134 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34621 KB; 2026-03-27 04:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 465 KB; ModuleInfoCache: 445 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 144 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34682 KB; 2026-03-27 04:02:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 04:02:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 04:02:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 04:02:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 04:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 468 KB; ModuleInfoCache: 445 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34693 KB; 2026-03-27 04:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 471 KB; ModuleInfoCache: 445 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 146 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34723 KB; 2026-03-27 04:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 471 KB; ModuleInfoCache: 445 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 134 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34714 KB; 2026-03-27 04:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 04:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 471 KB; ModuleInfoCache: 445 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 131 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34711 KB; 2026-03-27 04:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 471 KB; ModuleInfoCache: 445 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 131 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34712 KB; 2026-03-27 04:07:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 03:59:58, To:, 2026-03-27 04:07:03, Duration (s):, 425, Events Per Second:, 0.369, Events:, 157, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 74, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 35, Livegrid:, 35, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18200 2026-03-27 04:07:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s220ms. 2026-03-27 04:07:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 04:07:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 04:07:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 04:07:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 04:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2690 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 445 KB; ProcessInfo: 400 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 131 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34605 KB; 2026-03-27 04:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2690 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 547 KB; ModuleInfoCache: 445 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 320 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 185 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34983 KB; 2026-03-27 04:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2690 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; ProcessInfo: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; CacheEntry: 376 KB; rules::ProcessConditionsCache: 346 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 185 KB; BaseEvent: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35066 KB; 2026-03-27 04:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 04:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2690 KB; ProcessInfo: 663 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; rules::ProcessConditionsCache: 379 KB; CacheEntry: 376 KB; TcpIpConnectionsManager: 280 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 81 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35262 KB; 2026-03-27 04:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2692 KB; ProcessInfo: 719 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; BaseEvent: 108 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34919 KB; 2026-03-27 04:12:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 04:12:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 04:12:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 04:12:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 04:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2692 KB; ProcessInfo: 721 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 187 KB; BaseEvent: 109 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34917 KB; 2026-03-27 04:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2692 KB; ProcessInfo: 722 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 159 KB; BaseEvent: 111 KB; rules::ProcessConditionsCache: 39 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34906 KB; 2026-03-27 04:14:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 04:02:32, To:, 2026-03-27 04:14:03, Duration (s):, 691, Events Per Second:, 1.258, Events:, 870, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 791, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 72, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 101798 2026-03-27 04:14:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s983ms. 2026-03-27 04:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2692 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; ProcessInfo: 428 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34428 KB; 2026-03-27 04:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 04:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2692 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; ProcessInfo: 433 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 133 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34437 KB; 2026-03-27 04:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2692 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; ProcessInfo: 434 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 133 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34434 KB; 2026-03-27 04:17:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 04:17:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 04:17:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 04:17:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 04:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2692 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 449 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 146 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34487 KB; 2026-03-27 04:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2692 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 449 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 144 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34473 KB; 2026-03-27 04:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2692 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 452 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 146 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34468 KB; 2026-03-27 04:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 04:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2692 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 456 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34469 KB; 2026-03-27 04:21:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 04:14:53, To:, 2026-03-27 04:21:03, Duration (s):, 370, Events Per Second:, 0.229, Events:, 85, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 84, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12864 2026-03-27 04:21:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s526ms. 2026-03-27 04:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2692 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; ProcessInfo: 414 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 139 KB; rules::ProcessConditionsCache: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34413 KB; 2026-03-27 04:22:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 04:22:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 04:22:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 04:22:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 04:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2692 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; ProcessInfo: 414 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 138 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34407 KB; 2026-03-27 04:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2693 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 462 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34566 KB; 2026-03-27 04:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2693 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 489 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 164 KB; rules::ProcessConditionsCache: 128 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34643 KB; 2026-03-27 04:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 04:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2693 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 494 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 130 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34656 KB; 2026-03-27 04:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2693 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 517 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 185 KB; TcpIpConnectionsManager: 170 KB; rules::ProcessConditionsCache: 150 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34703 KB; 2026-03-27 04:27:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 04:27:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 04:27:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 04:27:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 04:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2693 KB; ProcessInfo: 588 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; rules::ProcessConditionsCache: 242 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 185 KB; BaseEvent: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34955 KB; 2026-03-27 04:28:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 04:21:27, To:, 2026-03-27 04:28:03, Duration (s):, 396, Events Per Second:, 2.356, Events:, 934, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 803, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 126, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 106206 2026-03-27 04:28:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s804ms. 2026-03-27 04:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2693 KB; ProcessInfo: 760 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; TcpIpConnectionsManager: 328 KB; cloudutils::CloudData: 185 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 19 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34967 KB; 2026-03-27 04:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2695 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 445 KB; TcpIpConnectionsManager: 405 KB; CacheEntry: 377 KB; rules::ProcessConditionsCache: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 185 KB; BaseEvent: 149 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35666 KB; 2026-03-27 04:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 04:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2695 KB; ProcessInfo: 984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 445 KB; TcpIpConnectionsManager: 377 KB; CacheEntry: 377 KB; rules::ProcessConditionsCache: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 185 KB; BaseEvent: 154 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35671 KB; 2026-03-27 04:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2696 KB; ProcessInfo: 1031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 445 KB; CacheEntry: 377 KB; rules::ProcessConditionsCache: 318 KB; TcpIpConnectionsManager: 269 KB; cloudutils::CloudData: 185 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 173 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35637 KB; 2026-03-27 04:32:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 04:32:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 04:32:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 04:32:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 04:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2698 KB; ProcessInfo: 1104 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; rules::ProcessConditionsCache: 397 KB; CacheEntry: 377 KB; BaseEvent: 212 KB; TcpIpConnectionsManager: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 185 KB; BatchSerializer::EventsQueueTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35773 KB; 2026-03-27 04:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2700 KB; ProcessInfo: 1129 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; rules::ProcessConditionsCache: 421 KB; CacheEntry: 377 KB; BaseEvent: 224 KB; TcpIpConnectionsManager: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 187 KB; BatchSerializer::EventsQueueTag: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35860 KB; 2026-03-27 04:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2700 KB; ProcessInfo: 1179 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 377 KB; BaseEvent: 250 KB; TcpIpConnectionsManager: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 71 KB; BatchSerializer::EventsQueueTag: 69 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35580 KB; 2026-03-27 04:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 04:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:35:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 04:28:09, To:, 2026-03-27 04:35:03, Duration (s):, 414, Events Per Second:, 3.566, Events:, 1478, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1223, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 7, Livegrid:, 7, OriginUrl:, 0, Alarms:, 240, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 165406 2026-03-27 04:35:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s493ms. 2026-03-27 04:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 97 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34620 KB; 2026-03-27 04:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 574 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 126 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34734 KB; 2026-03-27 04:37:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 04:37:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 04:37:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 04:37:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 04:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 574 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34715 KB; 2026-03-27 04:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 575 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 126 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34716 KB; 2026-03-27 04:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 646 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 163 KB; TcpIpConnectionsManager: 143 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34849 KB; 2026-03-27 04:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 04:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 819 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 345 KB; TcpIpConnectionsManager: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 187 KB; BaseEvent: 121 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35382 KB; 2026-03-27 04:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 1013 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; TcpIpConnectionsManager: 328 KB; BaseEvent: 201 KB; rules::ProcessConditionsCache: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 187 KB; BatchSerializer::EventsQueueTag: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35618 KB; 2026-03-27 04:42:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 04:35:08, To:, 2026-03-27 04:42:03, Duration (s):, 415, Events Per Second:, 3.618, Events:, 1503, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1298, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 204, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 170573 2026-03-27 04:42:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s978ms. 2026-03-27 04:42:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 04:42:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 04:42:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 04:42:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 04:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; TcpIpConnectionsManager: 356 KB; rules::ProcessConditionsCache: 275 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35388 KB; 2026-03-27 04:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; TcpIpConnectionsManager: 284 KB; rules::ProcessConditionsCache: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 187 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35336 KB; 2026-03-27 04:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 945 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 277 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35267 KB; 2026-03-27 04:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 04:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 948 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 144 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35221 KB; 2026-03-27 04:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 306 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 157 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35314 KB; 2026-03-27 04:47:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 04:47:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 04:47:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 04:47:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 04:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 304 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 148 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35308 KB; 2026-03-27 04:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 981 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 304 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 149 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35311 KB; 2026-03-27 04:49:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 04:42:09, To:, 2026-03-27 04:49:03, Duration (s):, 414, Events Per Second:, 0.495, Events:, 205, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 180, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25885 2026-03-27 04:49:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s109ms. 2026-03-27 04:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; ProcessInfo: 437 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 143 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34737 KB; 2026-03-27 04:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 04:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 475 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 347 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 159 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34814 KB; 2026-03-27 04:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 499 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 369 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 166 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34871 KB; 2026-03-27 04:52:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 04:52:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 04:52:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 04:52:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 04:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 509 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 175 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34901 KB; 2026-03-27 04:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 559 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 54 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34674 KB; 2026-03-27 04:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 559 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 180 KB; BaseEvent: 47 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34636 KB; 2026-03-27 04:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 04:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2701 KB; ProcessInfo: 584 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 57 KB; BaseEvent: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34713 KB; 2026-03-27 04:56:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 04:49:05, To:, 2026-03-27 04:56:03, Duration (s):, 418, Events Per Second:, 1.154, Events:, 483, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 433, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 45, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57329 2026-03-27 04:56:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s790ms. 2026-03-27 04:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2703 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 481 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 68 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34546 KB; 2026-03-27 04:57:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 04:57:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 04:57:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 04:57:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 04:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2703 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 487 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 179 KB; rules::ProcessConditionsCache: 74 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34552 KB; 2026-03-27 04:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2703 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 114 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34746 KB; 2026-03-27 04:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2703 KB; ProcessInfo: 587 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; TcpIpConnectionsManager: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 162 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34827 KB; 2026-03-27 04:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 04:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 04:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2703 KB; ProcessInfo: 600 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 131 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34816 KB; 2026-03-27 05:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2703 KB; ProcessInfo: 602 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 164 KB; rules::ProcessConditionsCache: 131 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34761 KB; 2026-03-27 05:02:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 05:02:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 05:02:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 05:02:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 05:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2703 KB; ProcessInfo: 603 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 133 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34758 KB; 2026-03-27 05:03:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 04:56:01, To:, 2026-03-27 05:03:03, Duration (s):, 422, Events Per Second:, 0.807, Events:, 341, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 318, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42474 2026-03-27 05:03:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s067ms. 2026-03-27 05:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2703 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; ProcessInfo: 406 KB; CacheEntry: 378 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34483 KB; 2026-03-27 05:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2703 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; ProcessInfo: 431 KB; CacheEntry: 378 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 158 KB; TcpIpConnectionsManager: 146 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34557 KB; 2026-03-27 05:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 05:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2704 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 509 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 237 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 175 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34801 KB; 2026-03-27 05:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2704 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 509 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 170 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34799 KB; 2026-03-27 05:07:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 05:07:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 05:07:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 05:07:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 05:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2704 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 509 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; rules::ProcessConditionsCache: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 161 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34793 KB; 2026-03-27 05:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; ProcessInfo: 665 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 446 KB; rules::ProcessConditionsCache: 403 KB; CacheEntry: 378 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 187 KB; BaseEvent: 123 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35248 KB; 2026-03-27 05:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; ProcessInfo: 848 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; TcpIpConnectionsManager: 259 KB; BaseEvent: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 158 KB; BatchSerializer::EventsQueueTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35356 KB; 2026-03-27 05:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 05:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:10:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 05:03:00, To:, 2026-03-27 05:10:03, Duration (s):, 423, Events Per Second:, 2.860, Events:, 1211, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1021, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 181, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 137030 2026-03-27 05:10:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s002ms. 2026-03-27 05:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; ProcessInfo: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 161 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35007 KB; 2026-03-27 05:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; ProcessInfo: 747 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 205 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 161 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34940 KB; 2026-03-27 05:12:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 05:12:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 05:12:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 05:12:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 05:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; ProcessInfo: 750 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 207 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 164 KB; TcpIpConnectionsManager: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34888 KB; 2026-03-27 05:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; ProcessInfo: 752 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 378 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 161 KB; TcpIpConnectionsManager: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 7 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34890 KB; 2026-03-27 05:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; ProcessInfo: 752 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 379 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 161 KB; TcpIpConnectionsManager: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34894 KB; 2026-03-27 05:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 05:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; ProcessInfo: 754 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 379 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 164 KB; TcpIpConnectionsManager: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34904 KB; 2026-03-27 05:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; ProcessInfo: 754 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; CacheEntry: 379 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 166 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34905 KB; 2026-03-27 05:17:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 05:10:13, To:, 2026-03-27 05:17:03, Duration (s):, 410, Events Per Second:, 0.119, Events:, 49, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 48, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8201 2026-03-27 05:17:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s972ms. 2026-03-27 05:17:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 05:17:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 05:17:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 05:17:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 05:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; ProcessInfo: 408 KB; CacheEntry: 379 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 187 KB; rules::ProcessConditionsCache: 174 KB; TcpIpConnectionsManager: 134 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34555 KB; 2026-03-27 05:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; ProcessInfo: 433 KB; CacheEntry: 379 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 144 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34630 KB; 2026-03-27 05:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 446 KB; ProcessInfo: 433 KB; CacheEntry: 379 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 144 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34630 KB; 2026-03-27 05:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 05:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 461 KB; ModuleInfoCache: 446 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 151 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34715 KB; 2026-03-27 05:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 472 KB; ModuleInfoCache: 446 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 152 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34778 KB; 2026-03-27 05:22:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 05:22:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 05:22:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 05:22:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 05:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 508 KB; ModuleInfoCache: 446 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 187 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34802 KB; 2026-03-27 05:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 508 KB; ModuleInfoCache: 446 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 182 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34774 KB; 2026-03-27 05:24:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 05:17:08, To:, 2026-03-27 05:24:03, Duration (s):, 415, Events Per Second:, 0.734, Events:, 305, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 281, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37058 2026-03-27 05:24:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s642ms. 2026-03-27 05:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 456 KB; ModuleInfoCache: 446 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 225 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34680 KB; 2026-03-27 05:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 05:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 465 KB; ModuleInfoCache: 446 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 234 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 152 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34664 KB; 2026-03-27 05:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 490 KB; ModuleInfoCache: 446 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 254 KB; cloudutils::CloudData: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 157 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34735 KB; 2026-03-27 05:27:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 05:27:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 05:27:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 05:27:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 05:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 490 KB; ModuleInfoCache: 446 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 146 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34728 KB; 2026-03-27 05:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 490 KB; ModuleInfoCache: 446 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 141 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34728 KB; 2026-03-27 05:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 490 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 131 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34723 KB; 2026-03-27 05:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 05:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 521 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 141 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34820 KB; 2026-03-27 05:31:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 05:24:49, To:, 2026-03-27 05:31:03, Duration (s):, 374, Events Per Second:, 0.518, Events:, 194, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 165, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25129 2026-03-27 05:31:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s962ms. 2026-03-27 05:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 447 KB; ProcessInfo: 440 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 296 KB; cloudutils::CloudData: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 151 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34699 KB; 2026-03-27 05:32:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 05:32:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 05:32:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 05:32:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 05:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 453 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 292 KB; cloudutils::CloudData: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 166 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34722 KB; 2026-03-27 05:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 453 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 156 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34716 KB; 2026-03-27 05:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 453 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 149 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34712 KB; 2026-03-27 05:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 05:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 455 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 131 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34706 KB; 2026-03-27 05:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 456 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 131 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34746 KB; 2026-03-27 05:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 478 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 141 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34816 KB; 2026-03-27 05:37:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 05:37:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 05:37:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 05:37:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 05:38:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 05:31:19, To:, 2026-03-27 05:38:03, Duration (s):, 404, Events Per Second:, 0.289, Events:, 117, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 106, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 10, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15550 2026-03-27 05:38:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s809ms. 2026-03-27 05:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; ProcessInfo: 423 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 313 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 141 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34745 KB; 2026-03-27 05:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 452 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 344 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 151 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34839 KB; 2026-03-27 05:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 05:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 499 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 141 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34909 KB; 2026-03-27 05:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 357 KB; cloudutils::CloudData: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 169 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34921 KB; 2026-03-27 05:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 355 KB; cloudutils::CloudData: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 157 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34911 KB; 2026-03-27 05:42:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 05:42:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 05:42:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 05:42:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 05:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 355 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 161 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34924 KB; 2026-03-27 05:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 355 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34900 KB; 2026-03-27 05:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 05:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:45:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 05:38:41, To:, 2026-03-27 05:45:03, Duration (s):, 382, Events Per Second:, 0.755, Events:, 289, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 271, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 14, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36718 2026-03-27 05:45:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s670ms. 2026-03-27 05:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; ProcessInfo: 405 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34735 KB; 2026-03-27 05:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; ProcessInfo: 405 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34734 KB; 2026-03-27 05:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; ProcessInfo: 405 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34758 KB; 2026-03-27 05:47:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 05:47:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 05:47:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 05:47:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 05:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 447 KB; ProcessInfo: 405 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34763 KB; 2026-03-27 05:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; ProcessInfo: 405 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34785 KB; 2026-03-27 05:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 05:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; ProcessInfo: 411 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 365 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34783 KB; 2026-03-27 05:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 459 KB; ModuleInfoCache: 447 KB; rules::ProcessConditionsCache: 416 KB; CacheEntry: 379 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 149 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34897 KB; 2026-03-27 05:52:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 05:49:41, To:, 2026-03-27 05:52:03, Duration (s):, 142, Events Per Second:, 2.869, Events:, 409, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 338, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 70, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47665 2026-03-27 05:52:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s819ms. 2026-03-27 05:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; ProcessInfo: 599 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; TcpIpConnectionsManager: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 188 KB; rules::ProcessConditionsCache: 174 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34852 KB; 2026-03-27 05:52:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 05:52:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 05:52:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 05:52:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 05:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; ProcessInfo: 696 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 280 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 188 KB; BaseEvent: 67 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35158 KB; 2026-03-27 05:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; ProcessInfo: 840 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; TcpIpConnectionsManager: 295 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 188 KB; BaseEvent: 136 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35168 KB; 2026-03-27 05:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 05:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; ProcessInfo: 866 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 188 KB; BaseEvent: 139 KB; rules::ProcessConditionsCache: 53 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35178 KB; 2026-03-27 05:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; ProcessInfo: 866 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; BaseEvent: 141 KB; rules::ProcessConditionsCache: 40 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35142 KB; 2026-03-27 05:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; TcpIpConnectionsManager: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 188 KB; BaseEvent: 159 KB; rules::ProcessConditionsCache: 135 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35316 KB; 2026-03-27 05:57:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 05:57:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 05:57:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 05:57:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 05:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2707 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 447 KB; CacheEntry: 379 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 188 KB; BaseEvent: 178 KB; rules::ProcessConditionsCache: 115 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35360 KB; 2026-03-27 05:59:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 05:52:09, To:, 2026-03-27 05:59:03, Duration (s):, 414, Events Per Second:, 2.750, Events:, 1140, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 983, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 156, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 129013 2026-03-27 05:59:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s834ms. 2026-03-27 05:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2709 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 530 KB; ModuleInfoCache: 448 KB; CacheEntry: 379 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 188 KB; rules::ProcessConditionsCache: 161 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34767 KB; 2026-03-27 05:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 05:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 05:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2709 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 541 KB; ModuleInfoCache: 448 KB; CacheEntry: 379 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 110 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34702 KB; 2026-03-27 06:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2709 KB; ProcessInfo: 586 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 448 KB; CacheEntry: 379 KB; cloudutils::CloudData: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 123 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34715 KB; 2026-03-27 06:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2709 KB; ProcessInfo: 586 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; CacheEntry: 379 KB; cloudutils::CloudData: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 121 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34725 KB; 2026-03-27 06:02:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 06:02:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 06:02:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 06:02:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 06:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2709 KB; ProcessInfo: 658 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 162 KB; BaseEvent: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34931 KB; 2026-03-27 06:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2709 KB; ProcessInfo: 752 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; CacheEntry: 379 KB; rules::ProcessConditionsCache: 329 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 188 KB; BaseEvent: 91 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35270 KB; 2026-03-27 06:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 06:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2710 KB; ProcessInfo: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 329 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; BaseEvent: 119 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35368 KB; 2026-03-27 06:06:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 05:59:13, To:, 2026-03-27 06:06:03, Duration (s):, 410, Events Per Second:, 1.941, Events:, 797, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 705, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 89, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 91423 2026-03-27 06:06:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s508ms. 2026-03-27 06:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2710 KB; ProcessInfo: 618 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 332 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 188 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35012 KB; 2026-03-27 06:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2710 KB; ProcessInfo: 641 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 356 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 180 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35041 KB; 2026-03-27 06:07:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 06:07:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 06:07:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 06:07:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 06:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2710 KB; ProcessInfo: 641 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 356 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 139 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35006 KB; 2026-03-27 06:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2710 KB; ProcessInfo: 644 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 358 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 139 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35014 KB; 2026-03-27 06:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 06:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2710 KB; ProcessInfo: 691 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 367 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 131 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35089 KB; 2026-03-27 06:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2710 KB; ProcessInfo: 693 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 367 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35081 KB; 2026-03-27 06:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2710 KB; ProcessInfo: 699 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 369 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 139 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35087 KB; 2026-03-27 06:12:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 06:12:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 06:12:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 06:12:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 06:13:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 06:06:12, To:, 2026-03-27 06:13:03, Duration (s):, 411, Events Per Second:, 0.632, Events:, 260, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 245, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33969 2026-03-27 06:13:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s757ms. 2026-03-27 06:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2710 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 436 KB; rules::ProcessConditionsCache: 383 KB; CacheEntry: 380 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 187 KB; TcpIpConnectionsManager: 162 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34802 KB; 2026-03-27 06:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 436 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 367 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 161 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34791 KB; 2026-03-27 06:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 06:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 437 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 369 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 156 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34795 KB; 2026-03-27 06:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 437 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 369 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 134 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34779 KB; 2026-03-27 06:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 443 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34789 KB; 2026-03-27 06:17:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 06:17:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 06:17:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 06:17:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 06:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 445 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34797 KB; 2026-03-27 06:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 446 KB; CacheEntry: 380 KB; rules::ProcessConditionsCache: 376 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34804 KB; 2026-03-27 06:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 06:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:20:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 06:12:52, To:, 2026-03-27 06:20:03, Duration (s):, 431, Events Per Second:, 0.123, Events:, 53, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 52, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9471 2026-03-27 06:20:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s326ms. 2026-03-27 06:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 408 KB; rules::ProcessConditionsCache: 383 KB; CacheEntry: 380 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34773 KB; 2026-03-27 06:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 448 KB; ProcessInfo: 408 KB; rules::ProcessConditionsCache: 383 KB; CacheEntry: 380 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34761 KB; 2026-03-27 06:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 408 KB; rules::ProcessConditionsCache: 383 KB; CacheEntry: 380 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 207 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34762 KB; 2026-03-27 06:22:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 06:22:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 06:22:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 06:22:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 06:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 408 KB; rules::ProcessConditionsCache: 383 KB; CacheEntry: 380 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34766 KB; 2026-03-27 06:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 408 KB; rules::ProcessConditionsCache: 385 KB; CacheEntry: 380 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34772 KB; 2026-03-27 06:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 06:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 436 KB; CacheEntry: 380 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34478 KB; 2026-03-27 06:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 448 KB; ProcessInfo: 437 KB; CacheEntry: 380 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34475 KB; 2026-03-27 06:27:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 06:20:04, To:, 2026-03-27 06:27:03, Duration (s):, 419, Events Per Second:, 0.369, Events:, 155, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 142, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 10, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20717 2026-03-27 06:27:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s684ms. 2026-03-27 06:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 456 KB; ModuleInfoCache: 448 KB; CacheEntry: 380 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 170 KB; rules::ProcessConditionsCache: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34521 KB; 2026-03-27 06:27:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 06:27:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 06:27:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 06:27:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 06:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 462 KB; ModuleInfoCache: 448 KB; CacheEntry: 380 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 188 KB; TcpIpConnectionsManager: 152 KB; rules::ProcessConditionsCache: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34516 KB; 2026-03-27 06:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2826 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 462 KB; ProcessInfo: 462 KB; CacheEntry: 395 KB; cloudutils::CloudData: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34659 KB; 2026-03-27 06:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 06:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2826 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 492 KB; ModuleInfoCache: 462 KB; CacheEntry: 395 KB; cloudutils::CloudData: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 74 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34716 KB; 2026-03-27 06:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2826 KB; ProcessInfo: 641 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 462 KB; CacheEntry: 395 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 196 KB; rules::ProcessConditionsCache: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35079 KB; 2026-03-27 06:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2826 KB; ProcessInfo: 641 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 462 KB; CacheEntry: 395 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 137 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35025 KB; 2026-03-27 06:32:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 06:32:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 06:32:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 06:32:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 06:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2826 KB; ProcessInfo: 641 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 462 KB; CacheEntry: 395 KB; cloudutils::CloudData: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 180 KB; rules::ProcessConditionsCache: 137 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35005 KB; 2026-03-27 06:34:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 06:27:00, To:, 2026-03-27 06:34:03, Duration (s):, 423, Events Per Second:, 1.348, Events:, 571, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 534, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 13, Livegrid:, 13, OriginUrl:, 0, Alarms:, 10, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67124 2026-03-27 06:34:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s830ms. 2026-03-27 06:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2828 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 468 KB; ModuleInfoCache: 462 KB; CacheEntry: 395 KB; cloudutils::CloudData: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 192 KB; TcpIpConnectionsManager: 172 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34816 KB; 2026-03-27 06:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 06:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2828 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 484 KB; ModuleInfoCache: 462 KB; CacheEntry: 395 KB; cloudutils::CloudData: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 165 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34801 KB; 2026-03-27 06:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2828 KB; ProcessInfo: 774 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 462 KB; CacheEntry: 395 KB; TcpIpConnectionsManager: 307 KB; cloudutils::CloudData: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; BaseEvent: 138 KB; rules::ProcessConditionsCache: 91 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35335 KB; 2026-03-27 06:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2828 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 462 KB; CacheEntry: 395 KB; TcpIpConnectionsManager: 379 KB; rules::ProcessConditionsCache: 295 KB; BaseEvent: 229 KB; cloudutils::CloudData: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; BatchSerializer::EventsQueueTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35917 KB; 2026-03-27 06:37:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 06:37:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 06:37:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 06:37:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 06:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2828 KB; ProcessInfo: 1086 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 462 KB; rules::ProcessConditionsCache: 429 KB; TcpIpConnectionsManager: 407 KB; CacheEntry: 395 KB; BaseEvent: 291 KB; cloudutils::CloudData: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; BatchSerializer::EventsQueueTag: 80 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36283 KB; 2026-03-27 06:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2828 KB; ProcessInfo: 1135 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 462 KB; CacheEntry: 395 KB; BaseEvent: 305 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 196 KB; BatchSerializer::EventsQueueTag: 86 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35924 KB; 2026-03-27 06:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 06:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2828 KB; ProcessInfo: 1148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 462 KB; CacheEntry: 395 KB; BaseEvent: 308 KB; cloudutils::CloudData: 196 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; BatchSerializer::EventsQueueTag: 88 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35823 KB; 2026-03-27 06:41:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 06:34:18, To:, 2026-03-27 06:41:03, Duration (s):, 405, Events Per Second:, 4.613, Events:, 1871, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1599, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 269, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 211128 2026-03-27 06:41:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s628ms. 2026-03-27 06:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2828 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 594 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 462 KB; ProcessInfo: 462 KB; CacheEntry: 395 KB; cloudutils::CloudData: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34677 KB; 2026-03-27 06:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2828 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 462 KB; ProcessInfo: 462 KB; CacheEntry: 395 KB; cloudutils::CloudData: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34656 KB; 2026-03-27 06:42:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 06:42:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 06:42:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 06:42:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 06:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2828 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 474 KB; ModuleInfoCache: 462 KB; CacheEntry: 395 KB; cloudutils::CloudData: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 144 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34644 KB; 2026-03-27 06:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 596 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 478 KB; ModuleInfoCache: 470 KB; CacheEntry: 404 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34770 KB; 2026-03-27 06:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 06:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 481 KB; ModuleInfoCache: 470 KB; CacheEntry: 404 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34780 KB; 2026-03-27 06:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 481 KB; ModuleInfoCache: 470 KB; CacheEntry: 404 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34773 KB; 2026-03-27 06:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 487 KB; ModuleInfoCache: 470 KB; CacheEntry: 404 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34760 KB; 2026-03-27 06:47:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 06:47:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 06:47:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 06:47:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 06:48:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 06:41:42, To:, 2026-03-27 06:48:03, Duration (s):, 381, Events Per Second:, 0.181, Events:, 69, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 68, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9611 2026-03-27 06:48:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s750ms. 2026-03-27 06:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 470 KB; ProcessInfo: 408 KB; CacheEntry: 404 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34666 KB; 2026-03-27 06:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 470 KB; ProcessInfo: 453 KB; CacheEntry: 404 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 185 KB; rules::ProcessConditionsCache: 146 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34879 KB; 2026-03-27 06:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 06:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 470 KB; ProcessInfo: 459 KB; CacheEntry: 404 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 180 KB; rules::ProcessConditionsCache: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34768 KB; 2026-03-27 06:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 470 KB; ProcessInfo: 465 KB; CacheEntry: 404 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 187 KB; rules::ProcessConditionsCache: 71 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34789 KB; 2026-03-27 06:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 521 KB; ModuleInfoCache: 470 KB; CacheEntry: 404 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 199 KB; rules::ProcessConditionsCache: 159 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35008 KB; 2026-03-27 06:52:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 06:52:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 06:52:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 06:52:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 06:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; ModuleInfoCache: 470 KB; CacheEntry: 404 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; rules::ProcessConditionsCache: 126 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35009 KB; 2026-03-27 06:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; ModuleInfoCache: 470 KB; CacheEntry: 404 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 58 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34937 KB; 2026-03-27 06:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 06:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:55:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 06:49:00, To:, 2026-03-27 06:55:03, Duration (s):, 363, Events Per Second:, 1.193, Events:, 434, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 433, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51840 2026-03-27 06:55:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s502ms. 2026-03-27 06:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 502 KB; ModuleInfoCache: 470 KB; CacheEntry: 404 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::ProcessConditionsCache: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34839 KB; 2026-03-27 06:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 502 KB; ModuleInfoCache: 470 KB; CacheEntry: 404 KB; cloudutils::CloudData: 199 KB; TcpIpConnectionsManager: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34801 KB; 2026-03-27 06:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 531 KB; ModuleInfoCache: 470 KB; CacheEntry: 404 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 172 KB; rules::ProcessConditionsCache: 84 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34882 KB; 2026-03-27 06:57:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 06:57:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 06:57:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 06:57:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 06:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 531 KB; ModuleInfoCache: 470 KB; CacheEntry: 404 KB; cloudutils::CloudData: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 84 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34864 KB; 2026-03-27 06:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; ProcessInfo: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 472 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 159 KB; rules::ProcessConditionsCache: 110 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34957 KB; 2026-03-27 06:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 06:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 06:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; ProcessInfo: 605 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 472 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 180 KB; rules::ProcessConditionsCache: 160 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35091 KB; 2026-03-27 07:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; ProcessInfo: 618 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 472 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; TcpIpConnectionsManager: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::ProcessConditionsCache: 123 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35067 KB; 2026-03-27 07:02:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 06:55:02, To:, 2026-03-27 07:02:03, Duration (s):, 421, Events Per Second:, 0.946, Events:, 399, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 358, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49808 2026-03-27 07:02:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s826ms. 2026-03-27 07:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 484 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; TcpIpConnectionsManager: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 150 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34902 KB; 2026-03-27 07:02:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 07:02:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 07:02:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 07:02:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 07:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 494 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 182 KB; rules::ProcessConditionsCache: 169 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34930 KB; 2026-03-27 07:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 494 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 152 KB; rules::ProcessConditionsCache: 150 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34878 KB; 2026-03-27 07:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 07:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 519 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 179 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 152 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34926 KB; 2026-03-27 07:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 519 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 152 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34925 KB; 2026-03-27 07:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 157 KB; rules::ProcessConditionsCache: 152 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34927 KB; 2026-03-27 07:07:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 07:07:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 07:07:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 07:07:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 07:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 152 KB; TcpIpConnectionsManager: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34911 KB; 2026-03-27 07:09:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 07:03:11, To:, 2026-03-27 07:09:03, Duration (s):, 352, Events Per Second:, 0.320, Events:, 113, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 112, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15287 2026-03-27 07:09:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s197ms. 2026-03-27 07:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; ProcessInfo: 453 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 159 KB; TcpIpConnectionsManager: 139 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34857 KB; 2026-03-27 07:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 07:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; ProcessInfo: 458 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 163 KB; TcpIpConnectionsManager: 138 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34871 KB; 2026-03-27 07:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 474 KB; ProcessInfo: 462 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; rules::ProcessConditionsCache: 165 KB; TcpIpConnectionsManager: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34866 KB; 2026-03-27 07:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 474 KB; ProcessInfo: 462 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; rules::ProcessConditionsCache: 165 KB; TcpIpConnectionsManager: 134 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34867 KB; 2026-03-27 07:12:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 07:12:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 07:12:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 07:12:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 07:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 486 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; rules::ProcessConditionsCache: 192 KB; TcpIpConnectionsManager: 143 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34967 KB; 2026-03-27 07:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; ProcessInfo: 681 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; rules::ProcessConditionsCache: 402 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; BaseEvent: 117 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35576 KB; 2026-03-27 07:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 07:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; ProcessInfo: 685 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; rules::ProcessConditionsCache: 405 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; BaseEvent: 117 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35583 KB; 2026-03-27 07:16:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 07:09:03, To:, 2026-03-27 07:16:03, Duration (s):, 420, Events Per Second:, 1.804, Events:, 759, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 649, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 105, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 88361 2026-03-27 07:16:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s291ms. 2026-03-27 07:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; ProcessInfo: 622 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; rules::ProcessConditionsCache: 405 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 200 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35362 KB; 2026-03-27 07:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; ProcessInfo: 630 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; rules::ProcessConditionsCache: 407 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35278 KB; 2026-03-27 07:17:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 07:17:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 07:17:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 07:17:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 07:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; ProcessInfo: 663 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 174 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34969 KB; 2026-03-27 07:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; ProcessInfo: 663 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 174 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34961 KB; 2026-03-27 07:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 07:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; ProcessInfo: 719 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; rules::ProcessConditionsCache: 130 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35201 KB; 2026-03-27 07:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; ProcessInfo: 741 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; rules::ProcessConditionsCache: 95 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35174 KB; 2026-03-27 07:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; ProcessInfo: 741 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 40 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35109 KB; 2026-03-27 07:22:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 07:22:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 07:22:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 07:22:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 07:23:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 07:16:35, To:, 2026-03-27 07:23:03, Duration (s):, 388, Events Per Second:, 0.841, Events:, 327, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 326, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39249 2026-03-27 07:23:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s628ms. 2026-03-27 07:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 474 KB; ProcessInfo: 470 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; TcpIpConnectionsManager: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34780 KB; 2026-03-27 07:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 474 KB; ProcessInfo: 470 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34742 KB; 2026-03-27 07:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 07:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 508 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; TcpIpConnectionsManager: 154 KB; rules::ProcessConditionsCache: 68 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34823 KB; 2026-03-27 07:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 509 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 152 KB; rules::ProcessConditionsCache: 68 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34828 KB; 2026-03-27 07:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 511 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 154 KB; rules::ProcessConditionsCache: 72 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34840 KB; 2026-03-27 07:27:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 07:27:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 07:27:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 07:27:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 07:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2904 KB; ProcessInfo: 566 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 169 KB; rules::ProcessConditionsCache: 130 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35000 KB; 2026-03-27 07:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2910 KB; ProcessInfo: 575 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 169 KB; rules::ProcessConditionsCache: 123 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35011 KB; 2026-03-27 07:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 07:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:30:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 07:24:43, To:, 2026-03-27 07:30:03, Duration (s):, 320, Events Per Second:, 0.923, Events:, 296, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 259, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37212 2026-03-27 07:30:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s686ms. 2026-03-27 07:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 169 KB; rules::ProcessConditionsCache: 141 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34864 KB; 2026-03-27 07:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2910 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 496 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 141 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34874 KB; 2026-03-27 07:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2910 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 497 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 143 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34872 KB; 2026-03-27 07:32:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 07:32:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 07:32:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 07:32:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 07:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2910 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 497 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 141 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34878 KB; 2026-03-27 07:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2910 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 544 KB; ModuleInfoCache: 474 KB; CacheEntry: 406 KB; cloudutils::CloudData: 200 KB; rules::ProcessConditionsCache: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 164 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35013 KB; 2026-03-27 07:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 07:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2912 KB; ProcessInfo: 577 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 474 KB; CacheEntry: 407 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; TcpIpConnectionsManager: 174 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35086 KB; 2026-03-27 07:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2912 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 407 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 201 KB; TcpIpConnectionsManager: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35146 KB; 2026-03-27 07:37:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 07:30:05, To:, 2026-03-27 07:37:03, Duration (s):, 418, Events Per Second:, 0.817, Events:, 342, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 313, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42426 2026-03-27 07:37:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s850ms. 2026-03-27 07:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 496 KB; ModuleInfoCache: 474 KB; CacheEntry: 407 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; TcpIpConnectionsManager: 166 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34951 KB; 2026-03-27 07:37:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 07:37:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 07:37:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 07:37:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 07:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; ModuleInfoCache: 474 KB; CacheEntry: 407 KB; rules::ProcessConditionsCache: 232 KB; cloudutils::CloudData: 201 KB; TcpIpConnectionsManager: 184 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35064 KB; 2026-03-27 07:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2912 KB; ProcessInfo: 588 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 407 KB; rules::ProcessConditionsCache: 237 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 172 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35131 KB; 2026-03-27 07:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 07:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2912 KB; ProcessInfo: 605 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 407 KB; rules::ProcessConditionsCache: 244 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 167 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35160 KB; 2026-03-27 07:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2912 KB; ProcessInfo: 606 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 474 KB; CacheEntry: 407 KB; rules::ProcessConditionsCache: 244 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 131 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35119 KB; 2026-03-27 07:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2914 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 474 KB; CacheEntry: 407 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; BaseEvent: 126 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35304 KB; 2026-03-27 07:42:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 07:42:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 07:42:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 07:42:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 07:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2914 KB; ProcessInfo: 1064 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 474 KB; CacheEntry: 407 KB; rules::ProcessConditionsCache: 340 KB; TcpIpConnectionsManager: 326 KB; BaseEvent: 256 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; BatchSerializer::EventsQueueTag: 71 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36159 KB; 2026-03-27 07:44:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 07:37:30, To:, 2026-03-27 07:44:03, Duration (s):, 393, Events Per Second:, 4.577, Events:, 1802, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1522, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 275, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 203277 2026-03-27 07:44:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s011ms. 2026-03-27 07:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2915 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 409 KB; TcpIpConnectionsManager: 366 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35469 KB; 2026-03-27 07:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 07:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2915 KB; ProcessInfo: 984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 474 KB; CacheEntry: 409 KB; TcpIpConnectionsManager: 307 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35459 KB; 2026-03-27 07:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2915 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 474 KB; CacheEntry: 409 KB; TcpIpConnectionsManager: 243 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 122 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35553 KB; 2026-03-27 07:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2915 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 409 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 78 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35448 KB; 2026-03-27 07:47:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 07:47:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 07:47:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 07:47:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 07:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2915 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 409 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 179 KB; rules::ProcessConditionsCache: 78 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35429 KB; 2026-03-27 07:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2915 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 474 KB; CacheEntry: 409 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 78 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35402 KB; 2026-03-27 07:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 07:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2915 KB; ProcessInfo: 1044 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 475 KB; CacheEntry: 410 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 129 KB; rules::ProcessConditionsCache: 84 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35398 KB; 2026-03-27 07:51:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 07:44:11, To:, 2026-03-27 07:51:03, Duration (s):, 412, Events Per Second:, 0.564, Events:, 233, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 218, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29857 2026-03-27 07:51:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s713ms. 2026-03-27 07:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 475 KB; CacheEntry: 410 KB; ProcessInfo: 403 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 129 KB; rules::ProcessConditionsCache: 84 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34716 KB; 2026-03-27 07:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 475 KB; CacheEntry: 410 KB; ProcessInfo: 403 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 129 KB; rules::ProcessConditionsCache: 84 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34716 KB; 2026-03-27 07:52:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 07:52:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 07:52:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 07:52:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 07:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 475 KB; CacheEntry: 410 KB; ProcessInfo: 403 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 129 KB; rules::ProcessConditionsCache: 84 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34716 KB; 2026-03-27 07:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 475 KB; CacheEntry: 410 KB; ProcessInfo: 403 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 129 KB; rules::ProcessConditionsCache: 84 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34718 KB; 2026-03-27 07:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 07:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2917 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 475 KB; ProcessInfo: 470 KB; CacheEntry: 410 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 172 KB; rules::ProcessConditionsCache: 140 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34899 KB; 2026-03-27 07:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2917 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 475 KB; ProcessInfo: 471 KB; CacheEntry: 410 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; TcpIpConnectionsManager: 172 KB; rules::ProcessConditionsCache: 118 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34873 KB; 2026-03-27 07:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2917 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 475 KB; ProcessInfo: 471 KB; CacheEntry: 410 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 172 KB; rules::ProcessConditionsCache: 118 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34879 KB; 2026-03-27 07:57:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 07:57:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 07:57:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 07:57:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 07:58:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 07:49:57, To:, 2026-03-27 07:58:03, Duration (s):, 486, Events Per Second:, 0.386, Events:, 188, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 173, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25127 2026-03-27 07:58:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s643ms. 2026-03-27 07:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2917 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 475 KB; ProcessInfo: 412 KB; CacheEntry: 410 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 138 KB; rules::ProcessConditionsCache: 119 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34760 KB; 2026-03-27 07:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 476 KB; ProcessInfo: 437 KB; CacheEntry: 410 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 152 KB; TcpIpConnectionsManager: 141 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34847 KB; 2026-03-27 07:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 07:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 07:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; ProcessInfo: 575 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 476 KB; CacheEntry: 410 KB; rules::ProcessConditionsCache: 341 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; BaseEvent: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35326 KB; 2026-03-27 08:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; ProcessInfo: 596 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 476 KB; CacheEntry: 410 KB; rules::ProcessConditionsCache: 277 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; BaseEvent: 71 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35304 KB; 2026-03-27 08:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; ProcessInfo: 596 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 476 KB; CacheEntry: 410 KB; rules::ProcessConditionsCache: 270 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; BaseEvent: 72 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35288 KB; 2026-03-27 08:02:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 08:02:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 08:02:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 08:02:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 08:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; ProcessInfo: 600 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 476 KB; CacheEntry: 410 KB; rules::ProcessConditionsCache: 279 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 180 KB; BaseEvent: 73 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35262 KB; 2026-03-27 08:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; ProcessInfo: 600 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 476 KB; CacheEntry: 410 KB; rules::ProcessConditionsCache: 279 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 75 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35218 KB; 2026-03-27 08:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 08:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:05:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 07:58:26, To:, 2026-03-27 08:05:03, Duration (s):, 397, Events Per Second:, 1.255, Events:, 499, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 440, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 58, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 60266 2026-03-27 08:05:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s814ms. 2026-03-27 08:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 476 KB; CacheEntry: 410 KB; ProcessInfo: 403 KB; rules::ProcessConditionsCache: 278 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34912 KB; 2026-03-27 08:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 476 KB; CacheEntry: 410 KB; ProcessInfo: 403 KB; rules::ProcessConditionsCache: 278 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34912 KB; 2026-03-27 08:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 476 KB; CacheEntry: 410 KB; ProcessInfo: 403 KB; rules::ProcessConditionsCache: 278 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34912 KB; 2026-03-27 08:07:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 08:07:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 08:07:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 08:07:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 08:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 477 KB; ProcessInfo: 450 KB; CacheEntry: 411 KB; rules::ProcessConditionsCache: 293 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 156 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35011 KB; 2026-03-27 08:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 494 KB; ModuleInfoCache: 477 KB; CacheEntry: 411 KB; rules::ProcessConditionsCache: 298 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 156 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35083 KB; 2026-03-27 08:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 08:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; ModuleInfoCache: 477 KB; CacheEntry: 411 KB; rules::ProcessConditionsCache: 304 KB; cloudutils::CloudData: 202 KB; TcpIpConnectionsManager: 182 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 178 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35149 KB; 2026-03-27 08:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 547 KB; ModuleInfoCache: 477 KB; CacheEntry: 411 KB; rules::ProcessConditionsCache: 329 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; TcpIpConnectionsManager: 166 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35201 KB; 2026-03-27 08:12:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 08:02:33, To:, 2026-03-27 08:12:03, Duration (s):, 570, Events Per Second:, 0.664, Events:, 379, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 365, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48202 2026-03-27 08:12:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s798ms. 2026-03-27 08:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2918 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 496 KB; ModuleInfoCache: 477 KB; CacheEntry: 411 KB; rules::ProcessConditionsCache: 329 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 166 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35102 KB; 2026-03-27 08:12:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 08:12:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 08:12:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 08:12:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 08:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; ModuleInfoCache: 477 KB; CacheEntry: 411 KB; rules::ProcessConditionsCache: 360 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 152 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35167 KB; 2026-03-27 08:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 552 KB; ModuleInfoCache: 478 KB; CacheEntry: 411 KB; rules::ProcessConditionsCache: 384 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 156 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35247 KB; 2026-03-27 08:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 08:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; ProcessInfo: 602 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 478 KB; CacheEntry: 411 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 58 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35041 KB; 2026-03-27 08:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; ProcessInfo: 628 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 478 KB; CacheEntry: 411 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 56 KB; BaseEvent: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35082 KB; 2026-03-27 08:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; ProcessInfo: 634 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 411 KB; cloudutils::CloudData: 201 KB; TcpIpConnectionsManager: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 60 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35083 KB; 2026-03-27 08:17:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 08:17:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 08:17:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 08:17:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 08:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; ProcessInfo: 656 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 478 KB; CacheEntry: 411 KB; cloudutils::CloudData: 201 KB; TcpIpConnectionsManager: 180 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 179 KB; rules::ProcessConditionsCache: 61 KB; BaseEvent: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35083 KB; 2026-03-27 08:19:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 08:12:25, To:, 2026-03-27 08:19:03, Duration (s):, 398, Events Per Second:, 1.133, Events:, 452, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 410, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 37, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53360 2026-03-27 08:19:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s870ms. 2026-03-27 08:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; ProcessInfo: 437 KB; CacheEntry: 411 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 159 KB; rules::ProcessConditionsCache: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34763 KB; 2026-03-27 08:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 08:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; ProcessInfo: 445 KB; CacheEntry: 411 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 159 KB; rules::ProcessConditionsCache: 82 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34795 KB; 2026-03-27 08:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; ProcessInfo: 445 KB; CacheEntry: 411 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 77 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34767 KB; 2026-03-27 08:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; ProcessInfo: 450 KB; CacheEntry: 411 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 138 KB; rules::ProcessConditionsCache: 77 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34779 KB; 2026-03-27 08:22:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 08:22:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 08:22:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 08:22:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 08:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 478 KB; ProcessInfo: 452 KB; CacheEntry: 411 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 141 KB; rules::ProcessConditionsCache: 82 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34795 KB; 2026-03-27 08:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; ProcessInfo: 452 KB; CacheEntry: 411 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 138 KB; rules::ProcessConditionsCache: 77 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34788 KB; 2026-03-27 08:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 08:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; ProcessInfo: 459 KB; CacheEntry: 411 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 82 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34802 KB; 2026-03-27 08:26:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 08:20:04, To:, 2026-03-27 08:26:03, Duration (s):, 359, Events Per Second:, 0.334, Events:, 120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 119, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16980 2026-03-27 08:26:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s654ms. 2026-03-27 08:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; ProcessInfo: 434 KB; CacheEntry: 411 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; TcpIpConnectionsManager: 161 KB; rules::ProcessConditionsCache: 108 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34813 KB; 2026-03-27 08:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 592 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 481 KB; ModuleInfoCache: 478 KB; CacheEntry: 411 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 201 KB; rules::ProcessConditionsCache: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35038 KB; 2026-03-27 08:27:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 08:27:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 08:27:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 08:27:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 08:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 481 KB; ModuleInfoCache: 478 KB; CacheEntry: 411 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 110 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34935 KB; 2026-03-27 08:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; ProcessInfo: 577 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 411 KB; rules::ProcessConditionsCache: 277 KB; TcpIpConnectionsManager: 243 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; BaseEvent: 80 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35347 KB; 2026-03-27 08:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 08:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2926 KB; ProcessInfo: 586 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 478 KB; CacheEntry: 411 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 202 KB; rules::ProcessConditionsCache: 194 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; BaseEvent: 102 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35271 KB; 2026-03-27 08:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2926 KB; ProcessInfo: 588 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 411 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 174 KB; BaseEvent: 106 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35226 KB; 2026-03-27 08:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2926 KB; ProcessInfo: 613 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 478 KB; CacheEntry: 411 KB; TcpIpConnectionsManager: 218 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 111 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35303 KB; 2026-03-27 08:32:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 08:32:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 08:32:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 08:32:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 08:33:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 08:26:15, To:, 2026-03-27 08:33:03, Duration (s):, 408, Events Per Second:, 1.710, Events:, 699, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 475, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 100, Livegrid:, 100, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 75578 2026-03-27 08:33:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s846ms. 2026-03-27 08:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 534 KB; ModuleInfoCache: 478 KB; CacheEntry: 411 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 201 KB; TcpIpConnectionsManager: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35145 KB; 2026-03-27 08:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2928 KB; ProcessInfo: 728 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 412 KB; TcpIpConnectionsManager: 271 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 134 KB; rules::ProcessConditionsCache: 55 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35345 KB; 2026-03-27 08:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 08:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2928 KB; ProcessInfo: 754 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 478 KB; CacheEntry: 412 KB; TcpIpConnectionsManager: 282 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; BaseEvent: 139 KB; rules::ProcessConditionsCache: 106 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35445 KB; 2026-03-27 08:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2928 KB; ProcessInfo: 776 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 412 KB; TcpIpConnectionsManager: 271 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; BaseEvent: 146 KB; rules::ProcessConditionsCache: 91 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35449 KB; 2026-03-27 08:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2928 KB; ProcessInfo: 776 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 412 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 179 KB; BaseEvent: 148 KB; rules::ProcessConditionsCache: 69 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35338 KB; 2026-03-27 08:37:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 08:37:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 08:37:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 08:37:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 08:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2928 KB; ProcessInfo: 801 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 412 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 179 KB; BaseEvent: 160 KB; rules::ProcessConditionsCache: 95 KB; BatchSerializer::EventsQueueTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35394 KB; 2026-03-27 08:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2928 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 412 KB; BaseEvent: 212 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; TcpIpConnectionsManager: 161 KB; rules::ProcessConditionsCache: 106 KB; BatchSerializer::EventsQueueTag: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35519 KB; 2026-03-27 08:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 08:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:40:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 08:33:13, To:, 2026-03-27 08:40:03, Duration (s):, 410, Events Per Second:, 3.172, Events:, 1303, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1033, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 64, Livegrid:, 64, OriginUrl:, 0, Alarms:, 141, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 147687 2026-03-27 08:40:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s935ms. 2026-03-27 08:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; ModuleInfoCache: 478 KB; CacheEntry: 412 KB; TcpIpConnectionsManager: 215 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35109 KB; 2026-03-27 08:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 550 KB; ModuleInfoCache: 478 KB; CacheEntry: 412 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 114 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35007 KB; 2026-03-27 08:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2929 KB; ProcessInfo: 572 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 412 KB; TcpIpConnectionsManager: 223 KB; cloudutils::CloudData: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 145 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35086 KB; 2026-03-27 08:42:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 08:42:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 08:42:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 08:42:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 08:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2929 KB; ProcessInfo: 574 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 412 KB; cloudutils::CloudData: 202 KB; TcpIpConnectionsManager: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 115 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35037 KB; 2026-03-27 08:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; ProcessInfo: 574 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 115 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35005 KB; 2026-03-27 08:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 08:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; ProcessInfo: 602 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 154 KB; rules::ProcessConditionsCache: 143 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35082 KB; 2026-03-27 08:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; ProcessInfo: 605 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 144 KB; rules::ProcessConditionsCache: 143 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35078 KB; 2026-03-27 08:47:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 08:40:03, To:, 2026-03-27 08:47:03, Duration (s):, 420, Events Per Second:, 0.551, Events:, 232, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 215, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 10, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33792 2026-03-27 08:47:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s655ms. 2026-03-27 08:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; ProcessInfo: 433 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 145 KB; TcpIpConnectionsManager: 144 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34858 KB; 2026-03-27 08:47:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 08:47:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 08:47:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 08:47:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 08:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; ProcessInfo: 458 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 171 KB; TcpIpConnectionsManager: 143 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34929 KB; 2026-03-27 08:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; ProcessInfo: 458 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; rules::ProcessConditionsCache: 169 KB; TcpIpConnectionsManager: 139 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34924 KB; 2026-03-27 08:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 08:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; ProcessInfo: 465 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 178 KB; TcpIpConnectionsManager: 143 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34951 KB; 2026-03-27 08:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; ProcessInfo: 662 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 413 KB; rules::ProcessConditionsCache: 386 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; BaseEvent: 107 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35551 KB; 2026-03-27 08:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; ProcessInfo: 737 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 413 KB; TcpIpConnectionsManager: 248 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; BaseEvent: 144 KB; rules::ProcessConditionsCache: 70 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35389 KB; 2026-03-27 08:52:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 08:52:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 08:52:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 08:52:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 08:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; ProcessInfo: 796 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 413 KB; TcpIpConnectionsManager: 294 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; BaseEvent: 162 KB; rules::ProcessConditionsCache: 116 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35563 KB; 2026-03-27 08:54:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 08:48:05, To:, 2026-03-27 08:54:03, Duration (s):, 358, Events Per Second:, 2.734, Events:, 981, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 827, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 153, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 111130 2026-03-27 08:54:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s937ms. 2026-03-27 08:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; ProcessInfo: 631 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 413 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 139 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35132 KB; 2026-03-27 08:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 08:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; ProcessInfo: 634 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; TcpIpConnectionsManager: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 105 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35070 KB; 2026-03-27 08:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2931 KB; ProcessInfo: 641 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 105 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35050 KB; 2026-03-27 08:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2932 KB; ProcessInfo: 688 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 170 KB; rules::ProcessConditionsCache: 155 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35189 KB; 2026-03-27 08:57:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 08:57:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 08:57:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 08:57:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 08:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2932 KB; ProcessInfo: 688 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 478 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 155 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35168 KB; 2026-03-27 08:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2934 KB; ProcessInfo: 712 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 479 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 173 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35230 KB; 2026-03-27 08:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 08:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 08:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2934 KB; ProcessInfo: 747 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 479 KB; CacheEntry: 413 KB; cloudutils::CloudData: 203 KB; rules::ProcessConditionsCache: 186 KB; TcpIpConnectionsManager: 180 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 179 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35299 KB; 2026-03-27 09:01:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 08:54:03, To:, 2026-03-27 09:01:03, Duration (s):, 420, Events Per Second:, 1.183, Events:, 498, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 466, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 21, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 59054 2026-03-27 09:01:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s884ms. 2026-03-27 09:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; ModuleInfoCache: 479 KB; CacheEntry: 413 KB; rules::ProcessConditionsCache: 221 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35085 KB; 2026-03-27 09:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2934 KB; ProcessInfo: 597 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 479 KB; CacheEntry: 413 KB; rules::ProcessConditionsCache: 317 KB; TcpIpConnectionsManager: 264 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35351 KB; 2026-03-27 09:02:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 09:02:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 09:02:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 09:02:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 09:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2934 KB; ProcessInfo: 597 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 479 KB; CacheEntry: 413 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 203 KB; rules::ProcessConditionsCache: 190 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35200 KB; 2026-03-27 09:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 782 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; rules::ProcessConditionsCache: 367 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; BaseEvent: 107 KB; BatchSerializer::EventsQueueTag: 41 KB; ProcessInfoCommandLineTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35787 KB; 2026-03-27 09:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 09:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; rules::ProcessConditionsCache: 367 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 111 KB; BatchSerializer::EventsQueueTag: 42 KB; ProcessInfoCommandLineTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35763 KB; 2026-03-27 09:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; TcpIpConnectionsManager: 174 KB; BaseEvent: 120 KB; BatchSerializer::EventsQueueTag: 46 KB; ProcessInfoCommandLineTag: 29 KB; rules::ProcessConditionsCache: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35409 KB; 2026-03-27 09:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 810 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 159 KB; BaseEvent: 121 KB; BatchSerializer::EventsQueueTag: 47 KB; ProcessInfoCommandLineTag: 29 KB; rules::ProcessConditionsCache: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35406 KB; 2026-03-27 09:07:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 09:07:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 09:07:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 09:07:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 09:08:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 09:01:03, To:, 2026-03-27 09:08:03, Duration (s):, 420, Events Per Second:, 2.214, Events:, 932, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 748, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 91, Livegrid:, 91, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 111367 2026-03-27 09:08:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s951ms. 2026-03-27 09:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 611 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; ProcessInfo: 449 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 157 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34845 KB; 2026-03-27 09:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 611 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 514 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 159 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34946 KB; 2026-03-27 09:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 09:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 614 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 519 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 157 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34968 KB; 2026-03-27 09:11:19 7967327fc6c0 Error: Error while sending control request to server at "eu01.agent.edr.eset.systems:8093", certificate was set to: /CN=Agent=c771dbf0-85fb-4c94-8961-6227fa858111. getReply: End of file [asio.misc:2] 2026-03-27 09:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; ProcessInfo: 591 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; rules::ProcessConditionsCache: 130 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35222 KB; 2026-03-27 09:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 618 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 102 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35221 KB; 2026-03-27 09:12:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 09:12:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 09:12:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 09:12:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 09:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 624 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 115 KB; BaseEvent: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35255 KB; 2026-03-27 09:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 184 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 104 KB; BaseEvent: 59 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35232 KB; 2026-03-27 09:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 09:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:15:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 09:08:27, To:, 2026-03-27 09:15:03, Duration (s):, 396, Events Per Second:, 1.293, Events:, 513, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 488, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 62220 2026-03-27 09:15:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s843ms. 2026-03-27 09:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; ProcessInfo: 471 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 108 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34954 KB; 2026-03-27 09:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 497 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 140 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35041 KB; 2026-03-27 09:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 158 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35154 KB; 2026-03-27 09:17:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 09:17:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 09:17:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 09:17:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 09:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 614 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 136 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35140 KB; 2026-03-27 09:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 615 KB; ProcessInfo: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 136 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35147 KB; 2026-03-27 09:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 09:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; ProcessInfo: 600 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 182 KB; TcpIpConnectionsManager: 179 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35243 KB; 2026-03-27 09:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 622 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 185 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 176 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35270 KB; 2026-03-27 09:22:03 7967594126c0 Info: Events Statistics, From:, 2026-03-27 09:15:10, To:, 2026-03-27 09:22:03, Duration (s):, 413, Events Per Second:, 1.005, Events:, 416, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 50328 2026-03-27 09:22:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s783ms. 2026-03-27 09:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 489 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 179 KB; rules::ProcessConditionsCache: 167 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35052 KB; 2026-03-27 09:22:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 09:22:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 09:22:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 09:22:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 09:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 534 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; rules::ProcessConditionsCache: 249 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35236 KB; 2026-03-27 09:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 682 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; rules::ProcessConditionsCache: 352 KB; TcpIpConnectionsManager: 269 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; BaseEvent: 73 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35630 KB; 2026-03-27 09:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 09:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; TcpIpConnectionsManager: 376 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 176 KB; BaseEvent: 172 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35952 KB; 2026-03-27 09:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; TcpIpConnectionsManager: 367 KB; cloudutils::CloudData: 204 KB; BaseEvent: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 154 KB; BatchSerializer::EventsQueueTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35919 KB; 2026-03-27 09:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; TcpIpConnectionsManager: 295 KB; BaseEvent: 244 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BatchSerializer::EventsQueueTag: 70 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36014 KB; 2026-03-27 09:27:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 09:27:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 09:27:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 09:27:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 09:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2956 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 483 KB; CacheEntry: 417 KB; BaseEvent: 251 KB; rules::ProcessConditionsCache: 222 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 182 KB; BatchSerializer::EventsQueueTag: 72 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35952 KB; 2026-03-27 09:29:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 09:22:20, To:, 2026-03-27 09:29:04, Duration (s):, 404, Events Per Second:, 3.572, Events:, 1443, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1123, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 73, Livegrid:, 73, OriginUrl:, 0, Alarms:, 173, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 157941 2026-03-27 09:29:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s945ms. 2026-03-27 09:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 484 KB; ProcessInfo: 458 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 154 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35079 KB; 2026-03-27 09:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 09:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 484 KB; ProcessInfo: 465 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 227 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 144 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35112 KB; 2026-03-27 09:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 496 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 271 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 167 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35193 KB; 2026-03-27 09:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 496 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 229 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; TcpIpConnectionsManager: 164 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35150 KB; 2026-03-27 09:32:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 09:32:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 09:32:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 09:32:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 09:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 518 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 232 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35208 KB; 2026-03-27 09:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 518 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 229 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 172 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35195 KB; 2026-03-27 09:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 09:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 232 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 159 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35201 KB; 2026-03-27 09:36:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 09:30:00, To:, 2026-03-27 09:36:04, Duration (s):, 364, Events Per Second:, 1.090, Events:, 397, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 330, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 27, Livegrid:, 27, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 50834 2026-03-27 09:36:10 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 6s668ms. 2026-03-27 09:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 518 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 366 KB; TcpIpConnectionsManager: 213 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; cloudutils::CloudData: 203 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 59937 KB; 2026-03-27 09:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 518 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 260 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 59811 KB; 2026-03-27 09:37:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 09:37:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 09:37:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 09:37:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 09:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; ProcessInfo: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 350 KB; TcpIpConnectionsManager: 267 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 60020 KB; 2026-03-27 09:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; ProcessInfo: 650 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 306 KB; TcpIpConnectionsManager: 253 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; BaseEvent: 67 KB; ProcessInfoCommandLineTag: 27 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 60134 KB; 2026-03-27 09:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 09:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; ProcessInfo: 655 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 271 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 72 KB; BatchSerializer::EventsQueueTag: 28 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 60083 KB; 2026-03-27 09:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; ProcessInfo: 655 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 271 KB; cloudutils::CloudData: 203 KB; TcpIpConnectionsManager: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; BaseEvent: 75 KB; BatchSerializer::EventsQueueTag: 29 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 60069 KB; 2026-03-27 09:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; ProcessInfo: 656 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 269 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 148 KB; BaseEvent: 78 KB; BatchSerializer::EventsQueueTag: 30 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 60010 KB; 2026-03-27 09:42:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 09:42:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 09:42:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 09:42:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 09:43:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 09:36:04, To:, 2026-03-27 09:43:04, Duration (s):, 420, Events Per Second:, 1.335, Events:, 561, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 438, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 61, Livegrid:, 61, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 69994 2026-03-27 09:43:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s820ms. 2026-03-27 09:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 484 KB; ProcessInfo: 431 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 269 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 59650 KB; 2026-03-27 09:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 484 KB; ProcessInfo: 433 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 269 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 59652 KB; 2026-03-27 09:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 09:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 531 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 355 KB; cloudutils::CloudData: 203 KB; TcpIpConnectionsManager: 190 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 59944 KB; 2026-03-27 09:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; ProcessInfo: 724 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; TcpIpConnectionsManager: 302 KB; rules::ProcessConditionsCache: 225 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; BaseEvent: 115 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 60234 KB; 2026-03-27 09:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; ProcessInfo: 870 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; TcpIpConnectionsManager: 362 KB; rules::ProcessConditionsCache: 271 KB; cloudutils::CloudData: 203 KB; BaseEvent: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; BatchSerializer::EventsQueueTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 60565 KB; 2026-03-27 09:47:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 09:47:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 09:47:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 09:47:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 09:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; TcpIpConnectionsManager: 335 KB; rules::ProcessConditionsCache: 267 KB; cloudutils::CloudData: 203 KB; BaseEvent: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; BatchSerializer::EventsQueueTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 60552 KB; 2026-03-27 09:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 484 KB; CacheEntry: 418 KB; TcpIpConnectionsManager: 269 KB; rules::ProcessConditionsCache: 267 KB; cloudutils::CloudData: 203 KB; BaseEvent: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; BatchSerializer::EventsQueueTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 60491 KB; 2026-03-27 09:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 09:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:50:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 09:43:34, To:, 2026-03-27 09:50:04, Duration (s):, 390, Events Per Second:, 3.224, Events:, 1258, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1084, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 173, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 141516 2026-03-27 09:50:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s950ms. 2026-03-27 09:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 484 KB; ProcessInfo: 468 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 279 KB; cloudutils::CloudData: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; TcpIpConnectionsManager: 162 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 59714 KB; 2026-03-27 09:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 330 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 185 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 59893 KB; 2026-03-27 09:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 184 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 59848 KB; 2026-03-27 09:52:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 09:52:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 09:52:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 09:52:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 09:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; ProcessInfo: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 379 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 60059 KB; 2026-03-27 09:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; ProcessInfo: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 295 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 59941 KB; 2026-03-27 09:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 09:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; ProcessInfo: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 332 KB; TcpIpConnectionsManager: 241 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; BaseEvent: 53 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 60095 KB; 2026-03-27 09:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2967 KB; ProcessInfo: 630 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 293 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; BaseEvent: 56 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 60054 KB; 2026-03-27 09:57:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 09:50:03, To:, 2026-03-27 09:57:04, Duration (s):, 421, Events Per Second:, 1.324, Events:, 558, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 495, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 10, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 63975 2026-03-27 09:57:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s773ms. 2026-03-27 09:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 508 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 314 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 59844 KB; 2026-03-27 09:57:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 09:57:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 09:57:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 09:57:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 09:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 53328 KB; ModuleMetadata: 2967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 736 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; rules::ProcessConditionsCache: 400 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 60102 KB; 2026-03-27 09:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; ProcessInfo: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 93 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61895 KB; 2026-03-27 09:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 09:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 09:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; ProcessInfo: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 101 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61929 KB; 2026-03-27 10:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2967 KB; ProcessInfo: 668 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 178 KB; rules::ProcessConditionsCache: 108 KB; BaseEvent: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61959 KB; 2026-03-27 10:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2967 KB; ProcessInfo: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; TcpIpConnectionsManager: 223 KB; cloudutils::CloudData: 204 KB; rules::ProcessConditionsCache: 194 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; BaseEvent: 66 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62117 KB; 2026-03-27 10:02:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 10:02:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 10:02:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 10:02:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 10:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2967 KB; ProcessInfo: 741 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 146 KB; BaseEvent: 84 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62110 KB; 2026-03-27 10:04:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 09:57:33, To:, 2026-03-27 10:04:04, Duration (s):, 391, Events Per Second:, 3.284, Events:, 1285, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1123, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 153, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 145901 2026-03-27 10:04:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s988ms. 2026-03-27 10:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2967 KB; ProcessInfo: 838 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 418 KB; TcpIpConnectionsManager: 351 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 71 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62200 KB; 2026-03-27 10:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 10:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2970 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; TcpIpConnectionsManager: 372 KB; cloudutils::CloudData: 204 KB; rules::ProcessConditionsCache: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; BaseEvent: 96 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62517 KB; 2026-03-27 10:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2970 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; TcpIpConnectionsManager: 346 KB; cloudutils::CloudData: 204 KB; rules::ProcessConditionsCache: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; BaseEvent: 102 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62522 KB; 2026-03-27 10:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2971 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; cloudutils::CloudData: 204 KB; rules::ProcessConditionsCache: 194 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 108 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62375 KB; 2026-03-27 10:07:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 10:07:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 10:07:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 10:07:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 10:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2971 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; cloudutils::CloudData: 204 KB; rules::ProcessConditionsCache: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 148 KB; BaseEvent: 109 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62320 KB; 2026-03-27 10:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2971 KB; ProcessInfo: 1009 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; cloudutils::CloudData: 204 KB; rules::ProcessConditionsCache: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; TcpIpConnectionsManager: 148 KB; BaseEvent: 121 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62383 KB; 2026-03-27 10:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 10:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2971 KB; ProcessInfo: 1044 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 235 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 180 KB; BaseEvent: 129 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62505 KB; 2026-03-27 10:11:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 10:04:04, To:, 2026-03-27 10:11:04, Duration (s):, 420, Events Per Second:, 2.043, Events:, 859, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 725, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 19, Livegrid:, 19, OriginUrl:, 0, Alarms:, 93, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 98658 2026-03-27 10:11:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s863ms. 2026-03-27 10:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2971 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 552 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 258 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61905 KB; 2026-03-27 10:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2971 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; ProcessInfo: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 236 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61923 KB; 2026-03-27 10:12:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 10:12:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 10:12:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 10:12:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 10:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2971 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; ProcessInfo: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 190 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61907 KB; 2026-03-27 10:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 167 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61893 KB; 2026-03-27 10:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 10:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; ProcessInfo: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 238 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61870 KB; 2026-03-27 10:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; ProcessInfo: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 238 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61874 KB; 2026-03-27 10:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; ProcessInfo: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 240 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 131 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61883 KB; 2026-03-27 10:17:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 10:17:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 10:17:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 10:17:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 10:18:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 10:11:09, To:, 2026-03-27 10:18:04, Duration (s):, 415, Events Per Second:, 0.556, Events:, 231, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 216, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29082 2026-03-27 10:18:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s701ms. 2026-03-27 10:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; ProcessInfo: 450 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 156 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 61716 KB; 2026-03-27 10:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 499 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 275 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61854 KB; 2026-03-27 10:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 10:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 553 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 326 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62016 KB; 2026-03-27 10:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 553 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 326 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61997 KB; 2026-03-27 10:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 553 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 328 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 159 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61975 KB; 2026-03-27 10:22:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 10:22:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 10:22:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 10:22:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 10:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 326 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; TcpIpConnectionsManager: 164 KB; BaseEvent: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62004 KB; 2026-03-27 10:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; ProcessInfo: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 357 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; TcpIpConnectionsManager: 172 KB; BaseEvent: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62090 KB; 2026-03-27 10:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 10:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:25:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 10:18:04, To:, 2026-03-27 10:25:04, Duration (s):, 420, Events Per Second:, 1.123, Events:, 472, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 423, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 46, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58614 2026-03-27 10:25:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s775ms. 2026-03-27 10:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 503 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 381 KB; cloudutils::CloudData: 204 KB; TcpIpConnectionsManager: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 61959 KB; 2026-03-27 10:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 503 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 359 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 172 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61916 KB; 2026-03-27 10:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 505 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 361 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 157 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61912 KB; 2026-03-27 10:27:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 10:27:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 10:27:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 10:27:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 10:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; ModuleInfoCache: 485 KB; CacheEntry: 420 KB; rules::ProcessConditionsCache: 359 KB; cloudutils::CloudData: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 166 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61931 KB; 2026-03-27 10:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; ProcessInfo: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; rules::ProcessConditionsCache: 403 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 179 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62081 KB; 2026-03-27 10:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 10:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; ProcessInfo: 628 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::ProcessConditionsCache: 78 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61882 KB; 2026-03-27 10:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; ProcessInfo: 628 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; TcpIpConnectionsManager: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::ProcessConditionsCache: 58 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61843 KB; 2026-03-27 10:32:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 10:25:00, To:, 2026-03-27 10:32:04, Duration (s):, 424, Events Per Second:, 0.876, Events:, 372, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 345, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47280 2026-03-27 10:32:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s862ms. 2026-03-27 10:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 525 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; TcpIpConnectionsManager: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 61674 KB; 2026-03-27 10:32:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 10:32:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 10:32:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 10:32:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 10:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 169 KB; rules::ProcessConditionsCache: 108 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61738 KB; 2026-03-27 10:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 553 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 159 KB; rules::ProcessConditionsCache: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61677 KB; 2026-03-27 10:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 10:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; ProcessInfo: 564 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 68 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61719 KB; 2026-03-27 10:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; ProcessInfo: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 71 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61726 KB; 2026-03-27 10:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; ProcessInfo: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 146 KB; rules::ProcessConditionsCache: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61709 KB; 2026-03-27 10:37:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 10:37:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 10:37:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 10:37:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 10:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; ProcessInfo: 591 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 178 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61751 KB; 2026-03-27 10:39:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 10:32:13, To:, 2026-03-27 10:39:04, Duration (s):, 411, Events Per Second:, 0.642, Events:, 264, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 263, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34993 2026-03-27 10:39:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s685ms. 2026-03-27 10:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; ProcessInfo: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 133 KB; ProcessInfoCommandLineTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61840 KB; 2026-03-27 10:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 10:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; ProcessInfo: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61780 KB; 2026-03-27 10:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; TcpIpConnectionsManager: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 104 KB; BaseEvent: 32 KB; ProcessInfoCommandLineTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61850 KB; 2026-03-27 10:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 169 KB; rules::ProcessConditionsCache: 102 KB; BaseEvent: 33 KB; ProcessInfoCommandLineTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61823 KB; 2026-03-27 10:42:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 10:42:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 10:42:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 10:42:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 10:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; ProcessInfo: 677 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 146 KB; rules::ProcessConditionsCache: 146 KB; BaseEvent: 61 KB; ProcessInfoCommandLineTag: 36 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61978 KB; 2026-03-27 10:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; ProcessInfo: 702 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 168 KB; TcpIpConnectionsManager: 146 KB; BaseEvent: 73 KB; ProcessInfoCommandLineTag: 36 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62044 KB; 2026-03-27 10:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 10:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; ProcessInfo: 753 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 205 KB; TcpIpConnectionsManager: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; BaseEvent: 81 KB; ProcessInfoCommandLineTag: 36 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62235 KB; 2026-03-27 10:46:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 10:39:04, To:, 2026-03-27 10:46:04, Duration (s):, 420, Events Per Second:, 1.824, Events:, 767, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 696, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 24, Livegrid:, 24, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 95345 2026-03-27 10:46:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s791ms. 2026-03-27 10:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 487 KB; CacheEntry: 422 KB; TcpIpConnectionsManager: 218 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61859 KB; 2026-03-27 10:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2990 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 536 KB; ModuleInfoCache: 488 KB; CacheEntry: 422 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; rules::ProcessConditionsCache: 174 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61842 KB; 2026-03-27 10:47:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 10:47:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 10:47:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 10:47:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 10:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2990 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 536 KB; ModuleInfoCache: 488 KB; CacheEntry: 422 KB; cloudutils::CloudData: 205 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 174 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61813 KB; 2026-03-27 10:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2990 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; ProcessInfo: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 422 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 205 KB; TcpIpConnectionsManager: 185 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61870 KB; 2026-03-27 10:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 10:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2992 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 422 KB; TcpIpConnectionsManager: 272 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; BaseEvent: 150 KB; rules::ProcessConditionsCache: 60 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62255 KB; 2026-03-27 10:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 1048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 362 KB; rules::ProcessConditionsCache: 299 KB; BaseEvent: 259 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BatchSerializer::EventsQueueTag: 71 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62948 KB; 2026-03-27 10:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 1219 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; TcpIpConnectionsManager: 435 KB; CacheEntry: 423 KB; BaseEvent: 337 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 179 KB; BatchSerializer::EventsQueueTag: 93 KB; rules::ProcessConditionsCache: 74 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 63066 KB; 2026-03-27 10:52:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 10:52:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 10:52:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 10:52:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 10:53:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 10:46:11, To:, 2026-03-27 10:53:04, Duration (s):, 413, Events Per Second:, 6.202, Events:, 2565, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2130, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 15, Livegrid:, 15, OriginUrl:, 0, Alarms:, 404, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 284889 2026-03-27 10:53:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s229ms. 2026-03-27 10:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 1158 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 408 KB; rules::ProcessConditionsCache: 326 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 62806 KB; 2026-03-27 10:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 1158 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 326 KB; TcpIpConnectionsManager: 310 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 62714 KB; 2026-03-27 10:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 10:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 1167 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 329 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62654 KB; 2026-03-27 10:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 1167 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 329 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 136 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62560 KB; 2026-03-27 10:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 1192 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 355 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 146 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62640 KB; 2026-03-27 10:57:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 10:57:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 10:57:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 10:57:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 10:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 1192 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 355 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 141 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62624 KB; 2026-03-27 10:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 1192 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 353 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 143 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62624 KB; 2026-03-27 10:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 10:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 10:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:00:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 10:54:25, To:, 2026-03-27 11:00:04, Duration (s):, 339, Events Per Second:, 0.904, Events:, 307, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 258, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 18, Livegrid:, 18, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39534 2026-03-27 11:00:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s697ms. 2026-03-27 11:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 187 KB; rules::ProcessConditionsCache: 135 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61804 KB; 2026-03-27 11:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 206 KB; TcpIpConnectionsManager: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61686 KB; 2026-03-27 11:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; ProcessInfo: 562 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 179 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61738 KB; 2026-03-27 11:02:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 11:02:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 11:02:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 11:02:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 11:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; ProcessInfo: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 206 KB; TcpIpConnectionsManager: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61748 KB; 2026-03-27 11:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; ProcessInfo: 613 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; rules::ProcessConditionsCache: 133 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61982 KB; 2026-03-27 11:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 11:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; ProcessInfo: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 206 KB; TcpIpConnectionsManager: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 63 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61934 KB; 2026-03-27 11:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 683 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 231 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; rules::ProcessConditionsCache: 137 KB; BaseEvent: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62118 KB; 2026-03-27 11:07:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 11:00:04, To:, 2026-03-27 11:07:04, Duration (s):, 420, Events Per Second:, 1.252, Events:, 527, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 504, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 63416 2026-03-27 11:07:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s811ms. 2026-03-27 11:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 248 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 135 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61891 KB; 2026-03-27 11:07:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 11:07:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 11:07:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 11:07:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 11:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; ProcessInfo: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 128 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61912 KB; 2026-03-27 11:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 690 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 256 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 178 KB; rules::ProcessConditionsCache: 93 KB; BaseEvent: 33 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62007 KB; 2026-03-27 11:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 11:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::ProcessConditionsCache: 102 KB; BaseEvent: 38 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62011 KB; 2026-03-27 11:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 728 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 143 KB; BaseEvent: 44 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62078 KB; 2026-03-27 11:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 728 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; TcpIpConnectionsManager: 170 KB; rules::ProcessConditionsCache: 100 KB; BaseEvent: 48 KB; ProcessInfoCommandLineTag: 25 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61996 KB; 2026-03-27 11:12:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 11:12:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 11:12:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 11:12:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 11:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2996 KB; ProcessInfo: 768 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 206 KB; TcpIpConnectionsManager: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 161 KB; BaseEvent: 56 KB; BatchSerializer::EventsQueueTag: 27 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62175 KB; 2026-03-27 11:14:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 11:07:03, To:, 2026-03-27 11:14:04, Duration (s):, 421, Events Per Second:, 1.481, Events:, 625, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 624, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 78297 2026-03-27 11:14:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s813ms. 2026-03-27 11:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 157 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 20 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 61892 KB; 2026-03-27 11:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 11:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 552 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 251 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 129 KB; ExtendedTcpIpConnectionInfo: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61927 KB; 2026-03-27 11:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 691 KB; ProcessInfo: 574 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 256 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; rules::ProcessConditionsCache: 109 KB; ExtendedTcpIpConnectionInfo: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61961 KB; 2026-03-27 11:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 711 KB; ProcessInfo: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 241 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 142 KB; ExtendedTcpIpConnectionInfo: 45 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62065 KB; 2026-03-27 11:17:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 11:17:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 11:17:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 11:17:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 11:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; ProcessInfo: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; rules::ProcessConditionsCache: 195 KB; ExtendedTcpIpConnectionInfo: 50 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62191 KB; 2026-03-27 11:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 710 KB; ProcessInfo: 693 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 249 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; BaseEvent: 67 KB; ExtendedTcpIpConnectionInfo: 50 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62283 KB; 2026-03-27 11:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 11:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2998 KB; ProcessInfo: 747 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 272 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; BaseEvent: 86 KB; ExtendedTcpIpConnectionInfo: 49 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62301 KB; 2026-03-27 11:21:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 11:14:00, To:, 2026-03-27 11:21:04, Duration (s):, 424, Events Per Second:, 1.692, Events:, 719, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 671, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 47, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 87806 2026-03-27 11:21:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s836ms. 2026-03-27 11:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; ProcessInfo: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 290 KB; TcpIpConnectionsManager: 287 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; ExtendedTcpIpConnectionInfo: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 62175 KB; 2026-03-27 11:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 2998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; ProcessInfo: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 272 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; ExtendedTcpIpConnectionInfo: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62108 KB; 2026-03-27 11:22:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 11:22:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 11:22:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 11:22:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 11:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; ProcessInfo: 656 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 252 KB; TcpIpConnectionsManager: 209 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62078 KB; 2026-03-27 11:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; ProcessInfo: 702 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 312 KB; TcpIpConnectionsManager: 245 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62238 KB; 2026-03-27 11:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 11:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; ProcessInfo: 706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 255 KB; cloudutils::CloudData: 205 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62143 KB; 2026-03-27 11:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; ProcessInfo: 731 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 303 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62243 KB; 2026-03-27 11:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; ProcessInfo: 778 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 283 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 179 KB; BaseEvent: 66 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62298 KB; 2026-03-27 11:27:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 11:27:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 11:27:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 11:27:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 11:28:04 7967594126c0 Info: Events Statistics, From:, 2026-03-27 11:21:14, To:, 2026-03-27 11:28:04, Duration (s):, 410, Events Per Second:, 1.514, Events:, 622, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 585, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 72139 2026-03-27 11:28:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s899ms. 2026-03-27 11:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 312 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 61986 KB; 2026-03-27 11:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; ProcessInfo: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 309 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62042 KB; 2026-03-27 11:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 11:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; ProcessInfo: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 351 KB; TcpIpConnectionsManager: 240 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62182 KB; 2026-03-27 11:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; ProcessInfo: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 340 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62152 KB; 2026-03-27 11:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; ProcessInfo: 658 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 364 KB; cloudutils::CloudData: 205 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62203 KB; 2026-03-27 11:32:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 11:32:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 11:32:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 11:32:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 11:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; ProcessInfo: 753 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; rules::ProcessConditionsCache: 134 KB; BaseEvent: 70 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62136 KB; 2026-03-27 11:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; ProcessInfo: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; rules::ProcessConditionsCache: 107 KB; BaseEvent: 78 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62151 KB; 2026-03-27 11:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 11:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:35:05 7967594126c0 Info: Events Statistics, From:, 2026-03-27 11:28:05, To:, 2026-03-27 11:35:04, Duration (s):, 419, Events Per Second:, 1.574, Events:, 661, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 624, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 79566 2026-03-27 11:35:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s854ms. 2026-03-27 11:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 276 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; rules::ProcessConditionsCache: 143 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 61941 KB; 2026-03-27 11:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; ProcessInfo: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 248 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61815 KB; 2026-03-27 11:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; ProcessInfo: 591 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61818 KB; 2026-03-27 11:37:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 11:37:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 11:37:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 11:37:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 11:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; ProcessInfo: 616 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 205 KB; TcpIpConnectionsManager: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; rules::ProcessConditionsCache: 109 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 12 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61884 KB; 2026-03-27 11:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; ProcessInfo: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 176 KB; rules::ProcessConditionsCache: 74 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61837 KB; 2026-03-27 11:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 11:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; ProcessInfo: 666 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 161 KB; rules::ProcessConditionsCache: 69 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61885 KB; 2026-03-27 11:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; ProcessInfo: 668 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 160 KB; rules::ProcessConditionsCache: 69 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61892 KB; 2026-03-27 11:42:05 7967594126c0 Info: Events Statistics, From:, 2026-03-27 11:35:04, To:, 2026-03-27 11:42:05, Duration (s):, 421, Events Per Second:, 0.751, Events:, 316, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 315, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43704 2026-03-27 11:42:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s776ms. 2026-03-27 11:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 502 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 96 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61695 KB; 2026-03-27 11:42:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 11:42:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 11:42:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 11:42:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 11:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 502 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 94 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61694 KB; 2026-03-27 11:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 502 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 94 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61719 KB; 2026-03-27 11:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 11:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 508 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 96 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61723 KB; 2026-03-27 11:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 518 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 147 KB; rules::ProcessConditionsCache: 99 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61725 KB; 2026-03-27 11:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 153 KB; rules::ProcessConditionsCache: 101 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61741 KB; 2026-03-27 11:47:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 11:47:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 11:47:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 11:47:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 11:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 153 KB; rules::ProcessConditionsCache: 96 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61741 KB; 2026-03-27 11:49:05 7967594126c0 Info: Events Statistics, From:, 2026-03-27 11:42:17, To:, 2026-03-27 11:49:05, Duration (s):, 408, Events Per Second:, 1.125, Events:, 459, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 387, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 71, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53677 2026-03-27 11:49:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s824ms. 2026-03-27 11:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; ProcessInfo: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 321 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62173 KB; 2026-03-27 11:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 11:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; ProcessInfo: 804 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 337 KB; cloudutils::CloudData: 206 KB; rules::ProcessConditionsCache: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; BaseEvent: 96 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62397 KB; 2026-03-27 11:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; ProcessInfo: 826 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 358 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 151 KB; BaseEvent: 103 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62415 KB; 2026-03-27 11:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; ProcessInfo: 850 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 312 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 124 KB; BaseEvent: 110 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62355 KB; 2026-03-27 11:52:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 11:52:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 11:52:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 11:52:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 11:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; ProcessInfo: 875 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 128 KB; rules::ProcessConditionsCache: 123 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62324 KB; 2026-03-27 11:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 257 KB; cloudutils::CloudData: 206 KB; rules::ProcessConditionsCache: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; BaseEvent: 152 KB; BatchSerializer::EventsQueueTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62542 KB; 2026-03-27 11:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 11:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; BaseEvent: 172 KB; rules::ProcessConditionsCache: 171 KB; BatchSerializer::EventsQueueTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62537 KB; 2026-03-27 11:56:05 7967594126c0 Info: Events Statistics, From:, 2026-03-27 11:49:01, To:, 2026-03-27 11:56:05, Duration (s):, 424, Events Per Second:, 2.756, Events:, 1169, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1049, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 119, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 133225 2026-03-27 11:56:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s992ms. 2026-03-27 11:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 543 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 170 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 61859 KB; 2026-03-27 11:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 184 KB; rules::ProcessConditionsCache: 172 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 61831 KB; 2026-03-27 11:57:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 11:57:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 11:57:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 11:57:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 11:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; ProcessInfo: 600 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; rules::ProcessConditionsCache: 260 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62016 KB; 2026-03-27 11:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; ProcessInfo: 612 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 183 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61951 KB; 2026-03-27 11:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 11:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 11:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; ProcessInfo: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 488 KB; CacheEntry: 423 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 206 KB; rules::ProcessConditionsCache: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61991 KB; 2026-03-27 12:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; ProcessInfo: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 490 KB; CacheEntry: 424 KB; rules::ProcessConditionsCache: 280 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 181 KB; BaseEvent: 52 KB; ProcessInfoCommandLineTag: 37 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62254 KB; 2026-03-27 12:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; ProcessInfo: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 490 KB; CacheEntry: 424 KB; rules::ProcessConditionsCache: 359 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 191 KB; BaseEvent: 63 KB; ProcessInfoCommandLineTag: 37 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62419 KB; 2026-03-27 12:02:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 12:02:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 12:02:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 12:02:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 12:03:05 7967594126c0 Info: Events Statistics, From:, 2026-03-27 11:56:11, To:, 2026-03-27 12:03:05, Duration (s):, 414, Events Per Second:, 1.625, Events:, 673, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 666, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 85758 2026-03-27 12:03:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s836ms. 2026-03-27 12:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; ProcessInfo: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 490 KB; CacheEntry: 424 KB; rules::ProcessConditionsCache: 281 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 186 KB; ProcessInfoCommandLineTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 62028 KB; 2026-03-27 12:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; ProcessInfo: 616 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 490 KB; CacheEntry: 424 KB; rules::ProcessConditionsCache: 281 KB; cloudutils::CloudData: 208 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; ProcessInfoCommandLineTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 62054 KB; 2026-03-27 12:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 12:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; ProcessInfo: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 490 KB; CacheEntry: 424 KB; rules::ProcessConditionsCache: 283 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 178 KB; ProcessInfoCommandLineTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62049 KB; 2026-03-27 12:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; ProcessInfo: 625 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 490 KB; CacheEntry: 424 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 148 KB; ProcessInfoCommandLineTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62051 KB; 2026-03-27 12:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; ProcessInfo: 625 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 490 KB; CacheEntry: 424 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 137 KB; ProcessInfoCommandLineTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62040 KB; 2026-03-27 12:07:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 12:07:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 12:07:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 12:07:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 12:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; ProcessInfo: 625 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 490 KB; CacheEntry: 424 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 137 KB; ProcessInfoCommandLineTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62041 KB; 2026-03-27 12:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; ProcessInfo: 625 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 490 KB; CacheEntry: 424 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 134 KB; ProcessInfoCommandLineTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62038 KB; 2026-03-27 12:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 12:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:10:05 7967594126c0 Info: Events Statistics, From:, 2026-03-27 12:03:57, To:, 2026-03-27 12:10:05, Duration (s):, 368, Events Per Second:, 0.239, Events:, 88, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 49, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 19, Livegrid:, 19, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12326 2026-03-27 12:10:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s521ms. 2026-03-27 12:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 490 KB; ProcessInfo: 436 KB; CacheEntry: 424 KB; rules::ProcessConditionsCache: 292 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 134 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 61801 KB; 2026-03-27 12:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 490 KB; ProcessInfo: 449 KB; CacheEntry: 424 KB; rules::ProcessConditionsCache: 303 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 134 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61811 KB; 2026-03-27 12:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 524 KB; ModuleInfoCache: 491 KB; CacheEntry: 425 KB; rules::ProcessConditionsCache: 314 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 152 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61949 KB; 2026-03-27 12:12:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 12:12:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 12:12:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 12:12:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 12:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 547 KB; ModuleInfoCache: 491 KB; CacheEntry: 425 KB; rules::ProcessConditionsCache: 323 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; TcpIpConnectionsManager: 176 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62012 KB; 2026-03-27 12:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; ProcessInfo: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; rules::ProcessConditionsCache: 329 KB; cloudutils::CloudData: 208 KB; TcpIpConnectionsManager: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62075 KB; 2026-03-27 12:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 12:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; ProcessInfo: 583 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; rules::ProcessConditionsCache: 334 KB; cloudutils::CloudData: 208 KB; TcpIpConnectionsManager: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62102 KB; 2026-03-27 12:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; rules::ProcessConditionsCache: 320 KB; cloudutils::CloudData: 208 KB; TcpIpConnectionsManager: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 178 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62092 KB; 2026-03-27 12:17:05 7967594126c0 Info: Events Statistics, From:, 2026-03-27 12:06:03, To:, 2026-03-27 12:17:05, Duration (s):, 662, Events Per Second:, 0.649, Events:, 430, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 429, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53224 2026-03-27 12:17:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s920ms. 2026-03-27 12:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 528 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; rules::ProcessConditionsCache: 393 KB; cloudutils::CloudData: 208 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62068 KB; 2026-03-27 12:17:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 12:17:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 12:17:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 12:17:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 12:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 531 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; TcpIpConnectionsManager: 209 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61731 KB; 2026-03-27 12:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; ProcessInfo: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 98 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61865 KB; 2026-03-27 12:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 12:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; ProcessInfo: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61808 KB; 2026-03-27 12:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 692 KB; ProcessInfo: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 85 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61932 KB; 2026-03-27 12:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 692 KB; ProcessInfo: 677 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; TcpIpConnectionsManager: 240 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; rules::ProcessConditionsCache: 104 KB; BaseEvent: 65 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62097 KB; 2026-03-27 12:22:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 12:22:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 12:22:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 12:22:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 12:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 695 KB; ProcessInfo: 680 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 107 KB; BaseEvent: 68 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62093 KB; 2026-03-27 12:24:05 7967594126c0 Info: Events Statistics, From:, 2026-03-27 12:17:07, To:, 2026-03-27 12:24:05, Duration (s):, 418, Events Per Second:, 1.345, Events:, 563, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 536, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 66283 2026-03-27 12:24:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s877ms. 2026-03-27 12:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 61834 KB; 2026-03-27 12:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 12:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; ProcessInfo: 584 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61849 KB; 2026-03-27 12:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; ProcessInfo: 584 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 171 KB; rules::ProcessConditionsCache: 128 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61844 KB; 2026-03-27 12:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 163 KB; rules::ProcessConditionsCache: 150 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61885 KB; 2026-03-27 12:27:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 12:27:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 12:27:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 12:27:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 12:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 147 KB; rules::ProcessConditionsCache: 128 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61845 KB; 2026-03-27 12:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 158 KB; TcpIpConnectionsManager: 145 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61878 KB; 2026-03-27 12:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 12:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3006 KB; ProcessInfo: 752 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 426 KB; rules::ProcessConditionsCache: 374 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; BaseEvent: 141 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62503 KB; 2026-03-27 12:31:05 7967594126c0 Info: Events Statistics, From:, 2026-03-27 12:24:01, To:, 2026-03-27 12:31:05, Duration (s):, 424, Events Per Second:, 3.373, Events:, 1432, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1060, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 96, Livegrid:, 96, OriginUrl:, 0, Alarms:, 179, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 158804 2026-03-27 12:31:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s023ms. 2026-03-27 12:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3009 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 427 KB; TcpIpConnectionsManager: 386 KB; rules::ProcessConditionsCache: 381 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62714 KB; 2026-03-27 12:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3010 KB; ProcessInfo: 1054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; TcpIpConnectionsManager: 452 KB; CacheEntry: 427 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; BaseEvent: 92 KB; rules::ProcessConditionsCache: 84 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62652 KB; 2026-03-27 12:32:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 12:32:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 12:32:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 12:32:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 12:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3010 KB; ProcessInfo: 1060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 427 KB; TcpIpConnectionsManager: 398 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; BaseEvent: 96 KB; rules::ProcessConditionsCache: 75 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62603 KB; 2026-03-27 12:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3010 KB; ProcessInfo: 1060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 427 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; BaseEvent: 100 KB; rules::ProcessConditionsCache: 70 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62437 KB; 2026-03-27 12:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 12:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3010 KB; ProcessInfo: 1085 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 427 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 171 KB; rules::ProcessConditionsCache: 117 KB; BaseEvent: 107 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62468 KB; 2026-03-27 12:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3010 KB; ProcessInfo: 1108 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 427 KB; cloudutils::CloudData: 208 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; BaseEvent: 114 KB; rules::ProcessConditionsCache: 73 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62463 KB; 2026-03-27 12:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3010 KB; ProcessInfo: 1108 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 491 KB; CacheEntry: 427 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 184 KB; BaseEvent: 115 KB; rules::ProcessConditionsCache: 77 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62472 KB; 2026-03-27 12:37:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 12:37:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 12:37:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 12:37:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 12:38:05 7967594126c0 Info: Events Statistics, From:, 2026-03-27 12:31:01, To:, 2026-03-27 12:38:05, Duration (s):, 424, Events Per Second:, 1.750, Events:, 743, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 651, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 81, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 88068 2026-03-27 12:38:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s006ms. 2026-03-27 12:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3010 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; ProcessInfo: 484 KB; CacheEntry: 427 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 180 KB; rules::ProcessConditionsCache: 77 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 61692 KB; 2026-03-27 12:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3010 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; ProcessInfo: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 427 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 159 KB; BaseEvent: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61959 KB; 2026-03-27 12:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 12:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3010 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; ProcessInfo: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 427 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 176 KB; rules::ProcessConditionsCache: 93 KB; BaseEvent: 59 KB; ProcessInfoCommandLineTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61898 KB; 2026-03-27 12:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3010 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; ProcessInfo: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 491 KB; CacheEntry: 427 KB; cloudutils::CloudData: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 89 KB; BaseEvent: 62 KB; ProcessInfoCommandLineTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 61887 KB; 2026-03-27 12:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; ProcessInfo: 663 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 493 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 100 KB; BaseEvent: 95 KB; BatchSerializer::EventsQueueTag: 33 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62145 KB; 2026-03-27 12:42:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 12:42:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 12:42:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 12:42:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 12:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 738 KB; ProcessInfo: 663 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 493 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; TcpIpConnectionsManager: 140 KB; rules::ProcessConditionsCache: 100 KB; BaseEvent: 97 KB; BatchSerializer::EventsQueueTag: 34 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62128 KB; 2026-03-27 12:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 740 KB; ProcessInfo: 666 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 494 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; TcpIpConnectionsManager: 140 KB; rules::ProcessConditionsCache: 102 KB; BaseEvent: 97 KB; BatchSerializer::EventsQueueTag: 35 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 62140 KB; 2026-03-27 12:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 12:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:45:05 7967594126c0 Info: Events Statistics, From:, 2026-03-27 12:38:24, To:, 2026-03-27 12:45:05, Duration (s):, 401, Events Per Second:, 1.807, Events:, 726, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 525, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 100, Livegrid:, 100, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 78564 2026-03-27 12:45:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s051ms. 2026-03-27 12:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 740 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 494 KB; ProcessInfo: 453 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 152 KB; rules::ProcessConditionsCache: 96 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 61775 KB; 2026-03-27 12:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; ProcessInfo: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; TcpIpConnectionsManager: 171 KB; rules::ProcessConditionsCache: 133 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61988 KB; 2026-03-27 12:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 748 KB; ProcessInfo: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 176 KB; rules::ProcessConditionsCache: 131 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62007 KB; 2026-03-27 12:47:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 12:47:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 12:47:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 12:47:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 12:48:13 7967327fc6c0 Error: Error while sending control request to server at "eu01.agent.edr.eset.systems:8093", certificate was set to: /CN=Agent=c771dbf0-85fb-4c94-8961-6227fa858111. getReply: End of file [asio.misc:2] 2026-03-27 12:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 770 KB; ProcessInfo: 602 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; TcpIpConnectionsManager: 173 KB; rules::ProcessConditionsCache: 166 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62116 KB; 2026-03-27 12:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 750 KB; ProcessInfo: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 155 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62090 KB; 2026-03-27 12:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 12:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 752 KB; ProcessInfo: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; rules::ProcessConditionsCache: 190 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 173 KB; BaseEvent: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62177 KB; 2026-03-27 12:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 739 KB; ProcessInfo: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; rules::ProcessConditionsCache: 188 KB; TcpIpConnectionsManager: 165 KB; BaseEvent: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62158 KB; 2026-03-27 12:52:05 7967594126c0 Info: Events Statistics, From:, 2026-03-27 12:45:09, To:, 2026-03-27 12:52:05, Duration (s):, 416, Events Per Second:, 1.257, Events:, 524, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 476, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 59998 2026-03-27 12:52:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s869ms. 2026-03-27 12:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 740 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; ProcessInfo: 474 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; rules::ProcessConditionsCache: 189 KB; TcpIpConnectionsManager: 153 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61897 KB; 2026-03-27 12:52:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 12:52:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 12:52:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 12:52:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 12:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 744 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; ProcessInfo: 492 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; TcpIpConnectionsManager: 153 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61977 KB; 2026-03-27 12:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 742 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 511 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; rules::ProcessConditionsCache: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 171 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BaseEvent: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61969 KB; 2026-03-27 12:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 12:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 743 KB; ProcessInfo: 684 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 375 KB; TcpIpConnectionsManager: 245 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; BaseEvent: 91 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62498 KB; 2026-03-27 12:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3031 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; TcpIpConnectionsManager: 358 KB; rules::ProcessConditionsCache: 261 KB; BaseEvent: 224 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; BatchSerializer::EventsQueueTag: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62935 KB; 2026-03-27 12:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3031 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 748 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; TcpIpConnectionsManager: 329 KB; rules::ProcessConditionsCache: 267 KB; BaseEvent: 226 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; BatchSerializer::EventsQueueTag: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62924 KB; 2026-03-27 12:57:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 12:57:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 12:57:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 12:57:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 12:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3032 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 750 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 300 KB; TcpIpConnectionsManager: 263 KB; BaseEvent: 241 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; BatchSerializer::EventsQueueTag: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62947 KB; 2026-03-27 12:59:06 7967594126c0 Info: Events Statistics, From:, 2026-03-27 12:52:23, To:, 2026-03-27 12:59:05, Duration (s):, 402, Events Per Second:, 3.534, Events:, 1424, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1203, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 218, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 160735 2026-03-27 12:59:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s038ms. 2026-03-27 12:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 750 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 531 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 292 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 178 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62089 KB; 2026-03-27 12:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 12:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 12:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 752 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 308 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 173 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62125 KB; 2026-03-27 13:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 739 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 310 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; TcpIpConnectionsManager: 160 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62107 KB; 2026-03-27 13:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; ProcessInfo: 569 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 317 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 163 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62137 KB; 2026-03-27 13:02:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 13:02:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 13:02:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 13:02:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 13:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 739 KB; ProcessInfo: 597 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 330 KB; cloudutils::CloudData: 209 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62214 KB; 2026-03-27 13:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 740 KB; ProcessInfo: 597 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 313 KB; cloudutils::CloudData: 209 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62200 KB; 2026-03-27 13:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 13:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 741 KB; ProcessInfo: 602 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 317 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 168 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62198 KB; 2026-03-27 13:06:06 7967594126c0 Info: Events Statistics, From:, 2026-03-27 12:59:59, To:, 2026-03-27 13:06:06, Duration (s):, 367, Events Per Second:, 0.632, Events:, 232, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 225, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29626 2026-03-27 13:06:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s798ms. 2026-03-27 13:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 742 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; ProcessInfo: 467 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 320 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 163 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62028 KB; 2026-03-27 13:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 743 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 499 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 349 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 171 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62118 KB; 2026-03-27 13:07:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 13:07:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 13:07:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 13:07:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 13:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 745 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 500 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 344 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62122 KB; 2026-03-27 13:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 745 KB; ProcessInfo: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 349 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 181 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62236 KB; 2026-03-27 13:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 13:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 764 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 354 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 163 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62254 KB; 2026-03-27 13:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 751 KB; ProcessInfo: 580 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 356 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 163 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62252 KB; 2026-03-27 13:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 726 KB; ProcessInfo: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 358 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 161 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62255 KB; 2026-03-27 13:12:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 13:12:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 13:12:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 13:12:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 13:13:06 7967594126c0 Info: Events Statistics, From:, 2026-03-27 13:06:06, To:, 2026-03-27 13:13:06, Duration (s):, 420, Events Per Second:, 0.902, Events:, 379, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 362, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48573 2026-03-27 13:13:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s920ms. 2026-03-27 13:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; ProcessInfo: 465 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 365 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 163 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62059 KB; 2026-03-27 13:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; ProcessInfo: 475 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 367 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62080 KB; 2026-03-27 13:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 13:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 732 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; ProcessInfo: 478 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 363 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 150 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62067 KB; 2026-03-27 13:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 723 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 502 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; rules::ProcessConditionsCache: 363 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 173 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62108 KB; 2026-03-27 13:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 726 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 528 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 188 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61843 KB; 2026-03-27 13:17:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 13:17:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 13:17:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 13:17:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 13:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 726 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 531 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 186 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61848 KB; 2026-03-27 13:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; TcpIpConnectionsManager: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 127 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62043 KB; 2026-03-27 13:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 13:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:20:06 7967594126c0 Info: Events Statistics, From:, 2026-03-27 13:12:57, To:, 2026-03-27 13:20:06, Duration (s):, 429, Events Per Second:, 0.929, Events:, 399, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 384, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49838 2026-03-27 13:20:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s857ms. 2026-03-27 13:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 547 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; rules::ProcessConditionsCache: 116 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61957 KB; 2026-03-27 13:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; ProcessInfo: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 81 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61931 KB; 2026-03-27 13:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 713 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 82 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61949 KB; 2026-03-27 13:22:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 13:22:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 13:22:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 13:22:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 13:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; ProcessInfo: 590 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; TcpIpConnectionsManager: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; rules::ProcessConditionsCache: 115 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61986 KB; 2026-03-27 13:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; ProcessInfo: 596 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 79 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61934 KB; 2026-03-27 13:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 13:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; ProcessInfo: 611 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 168 KB; rules::ProcessConditionsCache: 79 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61948 KB; 2026-03-27 13:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; ProcessInfo: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 176 KB; rules::ProcessConditionsCache: 82 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61979 KB; 2026-03-27 13:27:06 7967594126c0 Info: Events Statistics, From:, 2026-03-27 13:20:06, To:, 2026-03-27 13:27:06, Duration (s):, 420, Events Per Second:, 0.588, Events:, 247, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 246, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33311 2026-03-27 13:27:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s779ms. 2026-03-27 13:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 723 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 508 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 189 KB; rules::ProcessConditionsCache: 157 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61923 KB; 2026-03-27 13:27:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 13:27:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 13:27:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 13:27:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 13:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 508 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 92 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61868 KB; 2026-03-27 13:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 724 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 508 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 186 KB; rules::ProcessConditionsCache: 81 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61850 KB; 2026-03-27 13:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 13:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 726 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 514 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 184 KB; rules::ProcessConditionsCache: 87 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61868 KB; 2026-03-27 13:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 713 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 114 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61877 KB; 2026-03-27 13:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 530 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 145 KB; rules::ProcessConditionsCache: 94 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61855 KB; 2026-03-27 13:32:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 13:32:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 13:32:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 13:32:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 13:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 541 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; TcpIpConnectionsManager: 158 KB; rules::ProcessConditionsCache: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61933 KB; 2026-03-27 13:34:06 7967594126c0 Info: Events Statistics, From:, 2026-03-27 13:27:11, To:, 2026-03-27 13:34:06, Duration (s):, 415, Events Per Second:, 0.520, Events:, 216, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 215, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27760 2026-03-27 13:34:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s744ms. 2026-03-27 13:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 495 KB; ProcessInfo: 456 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 157 KB; rules::ProcessConditionsCache: 95 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61765 KB; 2026-03-27 13:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 13:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; ProcessInfo: 484 KB; CacheEntry: 429 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 176 KB; rules::ProcessConditionsCache: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61825 KB; 2026-03-27 13:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 509 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; rules::ProcessConditionsCache: 146 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61948 KB; 2026-03-27 13:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 512 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 188 KB; rules::ProcessConditionsCache: 104 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61899 KB; 2026-03-27 13:37:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 13:37:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 13:37:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 13:37:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 13:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 194 KB; rules::ProcessConditionsCache: 163 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62008 KB; 2026-03-27 13:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 183 KB; rules::ProcessConditionsCache: 106 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62014 KB; 2026-03-27 13:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 13:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; ProcessInfo: 600 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 178 KB; rules::ProcessConditionsCache: 110 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62036 KB; 2026-03-27 13:41:06 7967594126c0 Info: Events Statistics, From:, 2026-03-27 13:34:04, To:, 2026-03-27 13:41:06, Duration (s):, 422, Events Per Second:, 2.229, Events:, 942, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 815, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 22, Livegrid:, 22, OriginUrl:, 0, Alarms:, 82, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 109727 2026-03-27 13:41:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s924ms. 2026-03-27 13:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; ProcessInfo: 810 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; TcpIpConnectionsManager: 306 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; rules::ProcessConditionsCache: 20 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62262 KB; 2026-03-27 13:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; TcpIpConnectionsManager: 304 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; rules::ProcessConditionsCache: 98 KB; BaseEvent: 72 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62424 KB; 2026-03-27 13:42:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 13:42:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 13:42:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 13:42:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 13:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; ProcessInfo: 866 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; TcpIpConnectionsManager: 298 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 96 KB; BaseEvent: 74 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62417 KB; 2026-03-27 13:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; ProcessInfo: 890 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 194 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 138 KB; BaseEvent: 79 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62392 KB; 2026-03-27 13:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 13:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 161 KB; rules::ProcessConditionsCache: 101 KB; BaseEvent: 84 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62328 KB; 2026-03-27 13:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 429 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 155 KB; rules::ProcessConditionsCache: 101 KB; BaseEvent: 85 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62329 KB; 2026-03-27 13:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 723 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 157 KB; rules::ProcessConditionsCache: 125 KB; BaseEvent: 96 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62399 KB; 2026-03-27 13:47:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 13:47:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 13:47:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 13:47:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 13:48:06 7967594126c0 Info: Events Statistics, From:, 2026-03-27 13:41:04, To:, 2026-03-27 13:48:06, Duration (s):, 422, Events Per Second:, 1.377, Events:, 582, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 500, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 77, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 70785 2026-03-27 13:48:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s782ms. 2026-03-27 13:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 724 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; ProcessInfo: 455 KB; CacheEntry: 430 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 142 KB; rules::ProcessConditionsCache: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61789 KB; 2026-03-27 13:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3037 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 503 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 193 KB; rules::ProcessConditionsCache: 170 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61953 KB; 2026-03-27 13:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 13:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3037 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 519 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::ProcessConditionsCache: 142 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 61937 KB; 2026-03-27 13:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 55376 KB; ModuleMetadata: 3037 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; ProcessInfo: 712 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; rules::ProcessConditionsCache: 348 KB; TcpIpConnectionsManager: 273 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 106 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 62526 KB; 2026-03-27 13:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3040 KB; ProcessInfo: 1026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; TcpIpConnectionsManager: 383 KB; rules::ProcessConditionsCache: 301 KB; BaseEvent: 257 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; BatchSerializer::EventsQueueTag: 72 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 65148 KB; 2026-03-27 13:52:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 13:52:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 13:52:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 13:52:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 13:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3040 KB; ProcessInfo: 1026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; TcpIpConnectionsManager: 357 KB; rules::ProcessConditionsCache: 275 KB; BaseEvent: 261 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; BatchSerializer::EventsQueueTag: 73 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 65101 KB; 2026-03-27 13:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3040 KB; ProcessInfo: 1054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; TcpIpConnectionsManager: 309 KB; rules::ProcessConditionsCache: 288 KB; BaseEvent: 267 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 65101 KB; 2026-03-27 13:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 13:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:55:06 7967594126c0 Info: Events Statistics, From:, 2026-03-27 13:48:29, To:, 2026-03-27 13:55:06, Duration (s):, 397, Events Per Second:, 4.324, Events:, 1720, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1473, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 7, Livegrid:, 7, OriginUrl:, 0, Alarms:, 232, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 195167 2026-03-27 13:55:08 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s009ms. 2026-03-27 13:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3040 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 742 KB; ProcessInfo: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; rules::ProcessConditionsCache: 361 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64309 KB; 2026-03-27 13:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3040 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; ProcessInfo: 602 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; rules::ProcessConditionsCache: 310 KB; TcpIpConnectionsManager: 242 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64278 KB; 2026-03-27 13:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3040 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 724 KB; ProcessInfo: 627 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; rules::ProcessConditionsCache: 302 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64297 KB; 2026-03-27 13:57:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 13:57:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 13:57:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 13:57:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 13:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3040 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; ProcessInfo: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; rules::ProcessConditionsCache: 302 KB; cloudutils::CloudData: 209 KB; TcpIpConnectionsManager: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64277 KB; 2026-03-27 13:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; ProcessInfo: 678 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; rules::ProcessConditionsCache: 343 KB; cloudutils::CloudData: 209 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64395 KB; 2026-03-27 13:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 13:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 13:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; ProcessInfo: 738 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 729 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; TcpIpConnectionsManager: 224 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; rules::ProcessConditionsCache: 84 KB; BaseEvent: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64257 KB; 2026-03-27 14:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; ProcessInfo: 738 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 715 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; TcpIpConnectionsManager: 224 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 61 KB; rules::ProcessConditionsCache: 36 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64189 KB; 2026-03-27 14:02:07 7967594126c0 Info: Events Statistics, From:, 2026-03-27 13:55:06, To:, 2026-03-27 14:02:07, Duration (s):, 421, Events Per Second:, 1.204, Events:, 507, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 484, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 65515 2026-03-27 14:02:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 5s787ms. 2026-03-27 14:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 854 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 511 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 209 KB; TcpIpConnectionsManager: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63993 KB; 2026-03-27 14:02:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 14:02:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 14:02:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 14:02:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 14:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 857 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 536 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 209 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64063 KB; 2026-03-27 14:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 818 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 539 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 158 KB; rules::ProcessConditionsCache: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63999 KB; 2026-03-27 14:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 14:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 781 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 181 KB; rules::ProcessConditionsCache: 91 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64082 KB; 2026-03-27 14:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 782 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 170 KB; rules::ProcessConditionsCache: 89 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64072 KB; 2026-03-27 14:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 763 KB; ProcessInfo: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; rules::ProcessConditionsCache: 199 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64307 KB; 2026-03-27 14:07:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 14:07:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 14:07:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 14:07:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 14:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 723 KB; ProcessInfo: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 209 KB; TcpIpConnectionsManager: 194 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 94 KB; BaseEvent: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64116 KB; 2026-03-27 14:09:07 7967594126c0 Info: Events Statistics, From:, 2026-03-27 14:02:13, To:, 2026-03-27 14:09:07, Duration (s):, 414, Events Per Second:, 0.954, Events:, 395, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 367, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47832 2026-03-27 14:09:08 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s796ms. 2026-03-27 14:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 536 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 98 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63966 KB; 2026-03-27 14:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 14:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 729 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 550 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 111 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63995 KB; 2026-03-27 14:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 552 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 109 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63949 KB; 2026-03-27 14:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 553 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 111 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63958 KB; 2026-03-27 14:12:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 14:12:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 14:12:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 14:12:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 14:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; ProcessInfo: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 495 KB; CacheEntry: 430 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 117 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63985 KB; 2026-03-27 14:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; ProcessInfo: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 145 KB; rules::ProcessConditionsCache: 106 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63978 KB; 2026-03-27 14:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 14:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; ProcessInfo: 590 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 168 KB; rules::ProcessConditionsCache: 113 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64039 KB; 2026-03-27 14:16:07 7967594126c0 Info: Events Statistics, From:, 2026-03-27 14:09:09, To:, 2026-03-27 14:16:07, Duration (s):, 418, Events Per Second:, 0.643, Events:, 269, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 254, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 7, Livegrid:, 7, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34141 2026-03-27 14:16:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s650ms. 2026-03-27 14:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; ProcessInfo: 468 KB; CacheEntry: 432 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 160 KB; rules::ProcessConditionsCache: 110 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63859 KB; 2026-03-27 14:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 723 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; ProcessInfo: 494 KB; CacheEntry: 432 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 181 KB; rules::ProcessConditionsCache: 147 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63951 KB; 2026-03-27 14:17:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 14:17:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 14:17:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 14:17:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 14:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 726 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; ProcessInfo: 494 KB; CacheEntry: 432 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 158 KB; rules::ProcessConditionsCache: 114 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63901 KB; 2026-03-27 14:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 506 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 121 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63955 KB; 2026-03-27 14:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 14:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 534 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 181 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; rules::ProcessConditionsCache: 123 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63985 KB; 2026-03-27 14:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; ProcessInfo: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64216 KB; 2026-03-27 14:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; ProcessInfo: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 210 KB; rules::ProcessConditionsCache: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; BaseEvent: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64254 KB; 2026-03-27 14:22:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 14:22:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 14:22:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 14:22:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 14:23:07 7967594126c0 Info: Events Statistics, From:, 2026-03-27 14:16:45, To:, 2026-03-27 14:23:07, Duration (s):, 382, Events Per Second:, 1.162, Events:, 444, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 420, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52892 2026-03-27 14:23:08 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s783ms. 2026-03-27 14:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; ProcessInfo: 583 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 247 KB; TcpIpConnectionsManager: 245 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64205 KB; 2026-03-27 14:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; ProcessInfo: 583 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; TcpIpConnectionsManager: 235 KB; cloudutils::CloudData: 210 KB; rules::ProcessConditionsCache: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64149 KB; 2026-03-27 14:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 14:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; ProcessInfo: 584 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; cloudutils::CloudData: 210 KB; rules::ProcessConditionsCache: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 176 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64105 KB; 2026-03-27 14:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; ProcessInfo: 586 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; cloudutils::CloudData: 210 KB; rules::ProcessConditionsCache: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64081 KB; 2026-03-27 14:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 724 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; cloudutils::CloudData: 210 KB; rules::ProcessConditionsCache: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 132 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64078 KB; 2026-03-27 14:27:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 14:27:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 14:27:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 14:27:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 14:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; ProcessInfo: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 168 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64209 KB; 2026-03-27 14:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; ProcessInfo: 652 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 240 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 186 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64256 KB; 2026-03-27 14:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 14:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:30:07 7967594126c0 Info: Events Statistics, From:, 2026-03-27 14:23:07, To:, 2026-03-27 14:30:07, Duration (s):, 420, Events Per Second:, 0.809, Events:, 340, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 315, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42093 2026-03-27 14:30:08 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s799ms. 2026-03-27 14:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 506 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64064 KB; 2026-03-27 14:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 511 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 153 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64023 KB; 2026-03-27 14:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; ProcessInfo: 587 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 316 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 163 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64226 KB; 2026-03-27 14:32:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 14:32:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 14:32:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 14:32:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 14:33:15 7967594126c0 Info: Events Statistics, From:, 2026-03-27 14:30:08, To:, 2026-03-27 14:33:15, Duration (s):, 187, Events Per Second:, 1.345, Events:, 252, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 214, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 18, Livegrid:, 18, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32245 2026-03-27 14:33:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s634ms. 2026-03-27 14:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3046 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 733 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 517 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 286 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 160 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64096 KB; 2026-03-27 14:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 733 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 518 KB; ModuleInfoCache: 497 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 284 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 160 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64100 KB; 2026-03-27 14:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 14:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 735 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 521 KB; ModuleInfoCache: 497 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 286 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64102 KB; 2026-03-27 14:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 735 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 531 KB; ModuleInfoCache: 497 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 289 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; TcpIpConnectionsManager: 143 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64107 KB; 2026-03-27 14:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 738 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 533 KB; ModuleInfoCache: 497 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 289 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 143 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64114 KB; 2026-03-27 14:37:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 14:37:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 14:37:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 14:37:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 14:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 740 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; ModuleInfoCache: 497 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 289 KB; cloudutils::CloudData: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 152 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64136 KB; 2026-03-27 14:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 744 KB; ProcessInfo: 728 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 432 KB; cloudutils::CloudData: 209 KB; TcpIpConnectionsManager: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; BaseEvent: 88 KB; rules::ProcessConditionsCache: 43 KB; BatchSerializer::EventsQueueTag: 27 KB; ProcessInfoCommandLineTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64249 KB; 2026-03-27 14:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 14:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:40:15 7967594126c0 Info: Events Statistics, From:, 2026-03-27 14:33:07, To:, 2026-03-27 14:40:15, Duration (s):, 428, Events Per Second:, 3.544, Events:, 1519, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1271, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 7, Livegrid:, 11, OriginUrl:, 0, Alarms:, 229, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 170739 2026-03-27 14:40:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s941ms. 2026-03-27 14:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3051 KB; ProcessInfo: 1022 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; TcpIpConnectionsManager: 363 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; rules::ProcessConditionsCache: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64643 KB; 2026-03-27 14:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 1194 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 734 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; TcpIpConnectionsManager: 462 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 300 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 207 KB; BaseEvent: 91 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 65240 KB; 2026-03-27 14:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 1217 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 773 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; TcpIpConnectionsManager: 409 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 106 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 65192 KB; 2026-03-27 14:42:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 14:42:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 14:42:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 14:42:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 14:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 1217 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; TcpIpConnectionsManager: 258 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; BaseEvent: 107 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 65049 KB; 2026-03-27 14:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 1223 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 774 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 175 KB; BaseEvent: 111 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64977 KB; 2026-03-27 14:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 14:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 1514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 776 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; TcpIpConnectionsManager: 257 KB; BaseEvent: 256 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; rules::ProcessConditionsCache: 157 KB; BatchSerializer::EventsQueueTag: 71 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 65449 KB; 2026-03-27 14:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 1689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 758 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 341 KB; BaseEvent: 339 KB; TcpIpConnectionsManager: 332 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; BatchSerializer::EventsQueueTag: 93 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 65970 KB; 2026-03-27 14:47:15 7967594126c0 Info: Events Statistics, From:, 2026-03-27 14:40:17, To:, 2026-03-27 14:47:15, Duration (s):, 418, Events Per Second:, 4.751, Events:, 1989, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1663, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 315, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 221933 2026-03-27 14:47:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s117ms. 2026-03-27 14:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 758 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; TcpIpConnectionsManager: 344 KB; rules::ProcessConditionsCache: 344 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64767 KB; 2026-03-27 14:47:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 14:47:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 14:47:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 14:47:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 14:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 759 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 339 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64640 KB; 2026-03-27 14:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 761 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 344 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 147 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64582 KB; 2026-03-27 14:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 14:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 354 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 140 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64601 KB; 2026-03-27 14:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 966 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 381 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 160 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64668 KB; 2026-03-27 14:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 184 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::ProcessConditionsCache: 32 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64366 KB; 2026-03-27 14:52:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 14:52:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 14:52:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 14:52:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 14:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 732 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 180 KB; rules::ProcessConditionsCache: 31 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64372 KB; 2026-03-27 14:54:15 7967594126c0 Info: Events Statistics, From:, 2026-03-27 14:47:25, To:, 2026-03-27 14:54:15, Duration (s):, 410, Events Per Second:, 0.475, Events:, 195, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 182, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25135 2026-03-27 14:54:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s640ms. 2026-03-27 14:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 731 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; ProcessInfo: 459 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 157 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63785 KB; 2026-03-27 14:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 14:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 732 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; ProcessInfo: 462 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63770 KB; 2026-03-27 14:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 733 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; ProcessInfo: 465 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63774 KB; 2026-03-27 14:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 734 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 497 KB; ProcessInfo: 493 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 165 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63847 KB; 2026-03-27 14:57:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 14:57:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 14:57:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 14:57:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 14:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3053 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 512 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 180 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63903 KB; 2026-03-27 14:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 536 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 65 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63970 KB; 2026-03-27 14:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 14:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 14:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 740 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 161 KB; rules::ProcessConditionsCache: 80 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 63984 KB; 2026-03-27 15:01:15 7967594126c0 Info: Events Statistics, From:, 2026-03-27 14:54:31, To:, 2026-03-27 15:01:15, Duration (s):, 404, Events Per Second:, 1.149, Events:, 465, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 448, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58302 2026-03-27 15:01:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s782ms. 2026-03-27 15:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 743 KB; ProcessInfo: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 150 KB; rules::ProcessConditionsCache: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64009 KB; 2026-03-27 15:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; TcpIpConnectionsManager: 158 KB; rules::ProcessConditionsCache: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64015 KB; 2026-03-27 15:02:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 15:02:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 15:02:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 15:02:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 15:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 160 KB; rules::ProcessConditionsCache: 131 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64027 KB; 2026-03-27 15:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 706 KB; ProcessInfo: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 178 KB; rules::ProcessConditionsCache: 156 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64102 KB; 2026-03-27 15:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 15:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 710 KB; ProcessInfo: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 162 KB; TcpIpConnectionsManager: 158 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64115 KB; 2026-03-27 15:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 712 KB; ProcessInfo: 678 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; rules::ProcessConditionsCache: 206 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64264 KB; 2026-03-27 15:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 710 KB; ProcessInfo: 684 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 164 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64219 KB; 2026-03-27 15:07:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 15:07:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 15:07:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 15:07:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 15:08:15 7967594126c0 Info: Events Statistics, From:, 2026-03-27 15:01:40, To:, 2026-03-27 15:08:15, Duration (s):, 395, Events Per Second:, 1.016, Events:, 402, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 372, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 25, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48244 2026-03-27 15:08:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s822ms. 2026-03-27 15:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 713 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 539 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 245 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64145 KB; 2026-03-27 15:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 715 KB; ProcessInfo: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 241 KB; TcpIpConnectionsManager: 240 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; BaseEvent: 35 KB; ProcessInfoCommandLineTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64330 KB; 2026-03-27 15:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 15:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 57424 KB; ModuleMetadata: 3054 KB; ProcessInfo: 727 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 403 KB; TcpIpConnectionsManager: 281 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; BaseEvent: 48 KB; ProcessInfoCommandLineTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 64653 KB; 2026-03-27 15:10:51 7967437ff6c0 Persistent: Downloading of exclusions v9193-v9194 2026-03-27 15:10:52 7967437ff6c0 Persistent: Current active exclusions (9194): 1:709;10:515,3970;100:1250;101:461;102:556,1136,1142,1148,1171;103:1134;104:524,527,530;105:1157;106:1191;107:461;108:226,1238;109:524,526,527,531,532,533;11:400;110:1252;111:461;112:1158;113:400;114:990;115:328;116:16,587,860;117:7,10;118:661,662,666,667,669,670,674,675,676,678,683,691,746,757,2712,2714;119:926;12:400;120:11,13;121:390,4432;122:461;123:400;124:262;125:11;126:390,4432;127:7;128:9;129:728,729;13:400;130:950;131:772,773,774;132:424;133:400;134:11;135:461;136:461;137:461;138:483;139:1238;14:1278;140:1278;141:990;142:871;143:535,645,872;144:454;145:461;146:374,935;147:400;148:400;149:728,729;15:1156;150:424;151:185,465,466,467,1127,1171,1238,1277;152:400;153:456,1054,1158,1238;154:461;155:802;156:872;157:390,4432;158:1278;159:11;16:400;160:400;161:11,13;162:535;163:9;164:461;165:1163;166:45,191,200,1045,1093,1156,1157,1158,1231,1238,1239,1249,1277;167:1250;168:1191;169:461;17:461;170:728,729;171:424;172:661,662,667,669,674,675,676,678,680,683,691,738,746,757,769,770;173:461;174:1234;175:863;176:461;177:461;178:555;179:999;18:461;180:390,4432;182:86,272,524,527,555,556,572,574,644,645,1042,1043,1116,1158,1160;183:993;185:400;186:871;187:402;188:1198,1200;189:424;19:456;190:1269;191:1250;192:523,524,527,556;193:389,527,645,2515;194:390,566,4432;195:573;196:570;197:317;198:555,556;199:185,197;2:389,527,645,2515;20:390,4432;200:1687;201:570;202:19;203:1127;204:586;205:958;206:38,67,185,194,197,203,312,574,1045,1122;207:529;208:532;209:1018;21:249,1045,1156,1238;210:454,455,456,524,526,531,532,533,555,556,560,4389;211:645;212:356,527,530,1132;213:11,13,45,117,185,191,249,382,556,637,1127,3085,4430;214:19,67,200,400,420,523,524,527,556,958,1092,1122,1658;215:19;216:1687;217:644;218:487,904,1160,1161;219:1,10,67,83,86,200,524,527,555,560,588,645,1122,1142,1149,1193,1686,1687,3913,4171;22:400;220:12,19,400,555,863;221:1628;222:523,524,527,556;223:1156;224:2520;225:1686;226:272,382,1136,1149,1156,1191,4430;227:467,1127,1142,1149,1156,1249;228:1687;229:523,525,526,527,529,531;23:607;230:645;231:580;232:2515;233:526;235:1686;236:580;237:488,576;238:523;239:556;24:522,523,524,526,527,531,532,533,534;240:1628;241:555,556,1342;242:523,525,526,529,531,532,533,534;243:560;244:805,806,807,808,809,810,811,812;245:570,572;246:329;247:530;248:1628;249:2580;25:558;251:556;252:556;253:523,526,530;254:572;255:1156;256:529;258:356;259:1119;26:1191;260:272;261:390;263:515;265:2663;266:526,531;267:272,556,587;268:2712,2714,2715;27:572;271:2118;272:390;273:390;274:390;275:456,2970;276:13;277:2662;279:2136;28:487;280:456,531,2970,3647,3913,4171,4471;281:580;282:580;284:580;285:390;286:572,1156;287:10,114,334,524,572,1045;288:556;289:572,574,1127,1194;29:454;290:556,3729;291:67,1045,1122,1126,1127,1156;292:390;293:390;294:390;295:390;296:390;297:390;299:390;3:461;30:461;300:390;301:375;304:390;305:3085;306:3085;307:88;308:574,1045,1157;309:3085;31:555;312:390;313:390;314:390;315:390;316:390,4432;317:390,4432;318:390,4432;319:390,4432;32:556;320:390,4432;321:3189;322:3189;324:6,414;325:3642;326:535;327:535;328:1687,3312;329:506,3361,3966;330:1687,3312;331:3361;332:535;333:535;334:239;335:535;336:580,587;337:535;338:3694;339:662,680,704,1198,1210,1214,1215,1216,1217,3429,3430,3653,3715,3716,3755;34:461;340:3651;341:3651;342:323;343:2120;344:566,572,1105;345:1084;346:29;347:272,523,996;348:594;349:594;35:555,556;354:645;355:565;36:401;361:461;364:565;37:1056;378:646;379:554;38:400;39:1278;4:961;40:1134;41:461;42:975;43:461;434:565;435:565;436:565;438:542;439:109;44:316;440:61;441:644;442:461;445:1629;446:565;447:565;448:3198;449:3194;45:555,560;450:3194,3199;451:3195;452:3194;453:3194,3196;454:3194;455:3194,3235;456:3235;457:3240;458:3239;459:7;46:1278;460:7;461:7;462:527;463:1629;464:7;465:3972;466:78;467:12,524,527,555,868;468:574,1045,1156,3914;469:221;47:555,556,646,1136,1156,1158,1192,1231;470:565;471:1629;474:506;475:506;476:506;477:506;478:7;479:7;48:1278;480:383,1158,1277;481:2555;482:7;483:1157,1158,1249;484:1157,1158,1249;485:1157;49:527,530;5:390,4432;50:461;51:13,975;52:805,806,807,808,809,810,811,812;53:872;54:400;55:527;57:555;58:555,1156;59:1235;6:461;60:524,527;61:185,194,249,574,992,1045,1116,1127,1149,1156,1158,1277,3078;62:1157,1163,3607;63:954;64:1134;65:461;66:1278;67:390,4432;68:461;69:25;7:527,530;70:923;71:7;72:15,16;73:13,32,38,86,249,574,645,1018,1156,1157,1158,1196,3085;74:10;75:461;76:28;77:11,13,43,86,185,192,194,197,334,383,574,580,645,1045,1127,1149;78:283,485,1122,1127,1149,1231,1277;79:400;8:556;80:10,148,871,967,1045,1122,1127,1156,1157,1158,1238,1277;81:461;82:483;83:9;84:11;85:461;86:461;87:529,530;88:461;89:1250;9:555;90:662;91:1053;92:1157;93:411;94:644,646,1194;95:291;96:926;97:38,39,40,67,3913,4171;98:461;99:586 2026-03-27 15:10:52 7967437ff6c0 Error: Failed parsing stored rule 4548/1122 2026-03-27 15:10:52 7967437ff6c0 Error: Failed parsing stored rule 4550/1127 2026-03-27 15:10:53 7967437ff6c0 Error: Failed parsing stored rule 4571/1162 2026-03-27 15:10:54 7967437ff6c0 Error: Failed parsing stored rule 4525/3183 2026-03-27 15:10:56 7967437ff6c0 Error: Failed parsing stored rule 4523/4523 2026-03-27 15:10:56 7967437ff6c0 Error: Failed parsing stored rule 4524/4524 2026-03-27 15:10:56 7967437ff6c0 Error: Failed parsing stored rule 4527/4527 2026-03-27 15:10:56 7967437ff6c0 Error: Failed parsing stored rule 4528/4528 2026-03-27 15:10:56 7967437ff6c0 Error: Failed parsing stored rule 4529/4529 2026-03-27 15:10:56 7967437ff6c0 Error: Failed parsing stored rule 4530/4530 2026-03-27 15:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3054 KB; ProcessInfo: 727 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 708 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; TcpIpConnectionsManager: 271 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; BaseEvent: 54 KB; rules::ProcessConditionsCache: 43 KB; ProcessInfoCommandLineTag: 30 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; rules::RuleEvaluationCtx: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6844 KB; 2026-03-27 15:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3054 KB; ProcessInfo: 728 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 707 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 497 KB; CacheEntry: 433 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; BaseEvent: 60 KB; rules::ProcessConditionsCache: 32 KB; ProcessInfoCommandLineTag: 30 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; rules::RuleEvaluationCtx: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6784 KB; 2026-03-27 15:12:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 15:12:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 15:12:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 15:12:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 15:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3054 KB; ProcessInfo: 731 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; BaseEvent: 68 KB; rules::ProcessConditionsCache: 36 KB; ProcessInfoCommandLineTag: 30 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::RuleEvaluationCtx: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6800 KB; 2026-03-27 15:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; ProcessInfo: 765 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 710 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 199 KB; rules::ProcessConditionsCache: 83 KB; BaseEvent: 80 KB; BatchSerializer::EventsQueueTag: 34 KB; ProcessInfoCommandLineTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::RuleEvaluationCtx: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6908 KB; 2026-03-27 15:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 15:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:15:15 7967594126c0 Info: Events Statistics, From:, 2026-03-27 15:08:17, To:, 2026-03-27 15:15:15, Duration (s):, 418, Events Per Second:, 1.223, Events:, 512, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 499, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 68008 2026-03-27 15:15:15 7967594126c0 Info: Events Statistics, From:, 2026-03-27 15:10:52, To:, 2026-03-27 15:15:13, Duration (s):, 261, Events Per Second:, 0.881, Events:, 230, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 183, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32220 2026-03-27 15:15:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s767ms. 2026-03-27 15:15:17 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s685ms. 2026-03-27 15:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; ProcessInfo: 487 KB; CacheEntry: 433 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 184 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::RuleEvaluationCtx: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6432 KB; 2026-03-27 15:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 710 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 511 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; cloudutils::CloudData: 211 KB; TcpIpConnectionsManager: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::RuleEvaluationCtx: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6482 KB; 2026-03-27 15:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 712 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 547 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 92 KB; rules::RuleEvaluationCtx: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6619 KB; 2026-03-27 15:17:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 15:17:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 15:17:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 15:17:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 15:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 734 KB; ProcessInfo: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 83 KB; rules::RuleEvaluationCtx: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6692 KB; 2026-03-27 15:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; ProcessInfo: 625 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; TcpIpConnectionsManager: 260 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; rules::ProcessConditionsCache: 120 KB; BaseEvent: 34 KB; rules::RuleEvaluationCtx: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6813 KB; 2026-03-27 15:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 15:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; ProcessInfo: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 56 KB; BaseEvent: 40 KB; rules::RuleEvaluationCtx: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6721 KB; 2026-03-27 15:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 705 KB; ProcessInfo: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; cloudutils::CloudData: 211 KB; TcpIpConnectionsManager: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 58 KB; BaseEvent: 46 KB; rules::RuleEvaluationCtx: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6701 KB; 2026-03-27 15:22:15 7967594126c0 Info: Events Statistics, From:, 2026-03-27 15:15:13, To:, 2026-03-27 15:22:15, Duration (s):, 422, Events Per Second:, 1.100, Events:, 465, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 464, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 54999 2026-03-27 15:22:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s797ms. 2026-03-27 15:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 744 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; ProcessInfo: 492 KB; CacheEntry: 433 KB; cloudutils::CloudData: 211 KB; TcpIpConnectionsManager: 186 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 53 KB; rules::RuleEvaluationCtx: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6493 KB; 2026-03-27 15:22:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 15:22:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 15:22:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 15:22:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 15:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 726 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; ProcessInfo: 494 KB; CacheEntry: 433 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 160 KB; rules::ProcessConditionsCache: 57 KB; rules::RuleEvaluationCtx: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6460 KB; 2026-03-27 15:24:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 707 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; ProcessInfo: 494 KB; CacheEntry: 433 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 150 KB; rules::ProcessConditionsCache: 53 KB; rules::RuleEvaluationCtx: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6432 KB; 2026-03-27 15:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 15:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:25:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 499 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 137 KB; rules::ProcessConditionsCache: 55 KB; rules::RuleEvaluationCtx: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6432 KB; 2026-03-27 15:26:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 515 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 152 KB; rules::ProcessConditionsCache: 62 KB; rules::RuleEvaluationCtx: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6475 KB; 2026-03-27 15:27:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 712 KB; ProcessInfo: 684 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 237 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; BaseEvent: 92 KB; rules::RuleEvaluationCtx: 63 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 7031 KB; 2026-03-27 15:27:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 15:27:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 15:27:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 15:27:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 15:28:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 714 KB; ProcessInfo: 707 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 265 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; BaseEvent: 104 KB; rules::RuleEvaluationCtx: 65 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 7113 KB; 2026-03-27 15:29:15 7967594126c0 Info: Events Statistics, From:, 2026-03-27 15:22:41, To:, 2026-03-27 15:29:15, Duration (s):, 394, Events Per Second:, 1.537, Events:, 607, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 506, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 92, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 70336 2026-03-27 15:29:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s794ms. 2026-03-27 15:29:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 714 KB; ProcessInfo: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 267 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::RuleEvaluationCtx: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6899 KB; 2026-03-27 15:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 15:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:30:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; ProcessInfo: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 275 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 150 KB; rules::RuleEvaluationCtx: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6856 KB; 2026-03-27 15:31:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; ProcessInfo: 705 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 703 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 333 KB; cloudutils::CloudData: 211 KB; TcpIpConnectionsManager: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::RuleEvaluationCtx: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 7014 KB; 2026-03-27 15:32:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; ProcessInfo: 705 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 704 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 302 KB; cloudutils::CloudData: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 183 KB; rules::RuleEvaluationCtx: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6983 KB; 2026-03-27 15:32:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 15:32:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 15:32:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 15:32:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 15:33:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; ProcessInfo: 735 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 705 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 433 KB; rules::ProcessConditionsCache: 341 KB; cloudutils::CloudData: 211 KB; TcpIpConnectionsManager: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; rules::RuleEvaluationCtx: 65 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 7087 KB; 2026-03-27 15:34:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; ProcessInfo: 759 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 707 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 434 KB; rules::ProcessConditionsCache: 326 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 184 KB; rules::RuleEvaluationCtx: 65 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 7093 KB; 2026-03-27 15:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 15:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:35:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; ProcessInfo: 793 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 434 KB; rules::ProcessConditionsCache: 381 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; rules::RuleEvaluationCtx: 65 KB; BaseEvent: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 7218 KB; 2026-03-27 15:36:16 7967594126c0 Info: Events Statistics, From:, 2026-03-27 15:29:17, To:, 2026-03-27 15:36:16, Duration (s):, 419, Events Per Second:, 1.100, Events:, 461, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 434, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56499 2026-03-27 15:36:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s784ms. 2026-03-27 15:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 712 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 533 KB; ModuleInfoCache: 498 KB; CacheEntry: 434 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::RuleEvaluationCtx: 65 KB; rules::ProcessConditionsCache: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6575 KB; 2026-03-27 15:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 714 KB; ProcessInfo: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 434 KB; TcpIpConnectionsManager: 235 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; rules::ProcessConditionsCache: 88 KB; rules::RuleEvaluationCtx: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6706 KB; 2026-03-27 15:37:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 15:37:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 15:37:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 15:37:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 15:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 713 KB; ProcessInfo: 586 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 434 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::RuleEvaluationCtx: 65 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6647 KB; 2026-03-27 15:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 713 KB; ProcessInfo: 653 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 498 KB; CacheEntry: 434 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 82 KB; rules::RuleEvaluationCtx: 67 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6782 KB; 2026-03-27 15:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 15:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; ProcessInfo: 660 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 434 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 186 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::RuleEvaluationCtx: 67 KB; rules::ProcessConditionsCache: 49 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6728 KB; 2026-03-27 15:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 704 KB; ProcessInfo: 660 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 498 KB; CacheEntry: 434 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 161 KB; rules::RuleEvaluationCtx: 67 KB; rules::ProcessConditionsCache: 46 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6696 KB; 2026-03-27 15:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 705 KB; ProcessInfo: 682 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; CacheEntry: 434 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 173 KB; rules::RuleEvaluationCtx: 67 KB; rules::ProcessConditionsCache: 57 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6749 KB; 2026-03-27 15:42:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 15:42:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 15:42:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 15:42:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 15:43:16 7967594126c0 Info: Events Statistics, From:, 2026-03-27 15:36:15, To:, 2026-03-27 15:43:16, Duration (s):, 421, Events Per Second:, 1.005, Events:, 423, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 422, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52870 2026-03-27 15:43:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s799ms. 2026-03-27 15:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 3060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 704 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 498 KB; ProcessInfo: 461 KB; CacheEntry: 434 KB; cloudutils::CloudData: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 158 KB; rules::RuleEvaluationCtx: 67 KB; rules::ProcessConditionsCache: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 6431 KB; 2026-03-27 15:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1506 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 461 KB; ModuleInfoCache: 296 KB; CacheEntry: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 101 KB; rules::RuleEvaluationCtx: 67 KB; rules::ProcessConditionsCache: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4373 KB; 2026-03-27 15:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 15:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1506 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 514 KB; ModuleInfoCache: 296 KB; CacheEntry: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 158 KB; rules::ProcessConditionsCache: 111 KB; cloudutils::CloudData: 101 KB; rules::RuleEvaluationCtx: 67 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4520 KB; 2026-03-27 15:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1506 KB; ProcessInfo: 725 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 324 KB; ModuleInfoCache: 296 KB; TcpIpConnectionsManager: 250 KB; CacheEntry: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; BaseEvent: 126 KB; rules::RuleEvaluationCtx: 123 KB; cloudutils::CloudData: 101 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 5196 KB; 2026-03-27 15:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1506 KB; ProcessInfo: 735 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 711 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 324 KB; ModuleInfoCache: 296 KB; TcpIpConnectionsManager: 262 KB; CacheEntry: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 127 KB; rules::RuleEvaluationCtx: 123 KB; cloudutils::CloudData: 101 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 5223 KB; 2026-03-27 15:47:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 15:47:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 15:47:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 15:47:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 15:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1506 KB; ProcessInfo: 735 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 712 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 322 KB; ModuleInfoCache: 296 KB; TcpIpConnectionsManager: 242 KB; CacheEntry: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; BaseEvent: 127 KB; rules::RuleEvaluationCtx: 123 KB; cloudutils::CloudData: 101 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 5206 KB; 2026-03-27 15:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1506 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 852 KB; ProcessInfo: 738 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 327 KB; ModuleInfoCache: 296 KB; CacheEntry: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 145 KB; BaseEvent: 130 KB; rules::RuleEvaluationCtx: 123 KB; cloudutils::CloudData: 101 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 5265 KB; 2026-03-27 15:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 15:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:50:16 7967594126c0 Info: Events Statistics, From:, 2026-03-27 15:43:18, To:, 2026-03-27 15:50:16, Duration (s):, 418, Events Per Second:, 2.320, Events:, 970, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 840, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 119, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 112281 2026-03-27 15:50:17 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s948ms. 2026-03-27 15:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1509 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 796 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; rules::ProcessConditionsCache: 368 KB; ModuleInfoCache: 296 KB; CacheEntry: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 140 KB; rules::RuleEvaluationCtx: 129 KB; cloudutils::CloudData: 101 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4874 KB; 2026-03-27 15:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1510 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 784 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 539 KB; rules::ProcessConditionsCache: 368 KB; ModuleInfoCache: 296 KB; CacheEntry: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 139 KB; rules::RuleEvaluationCtx: 129 KB; cloudutils::CloudData: 102 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4891 KB; 2026-03-27 15:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 766 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 541 KB; rules::ProcessConditionsCache: 368 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 139 KB; rules::RuleEvaluationCtx: 129 KB; cloudutils::CloudData: 102 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4884 KB; 2026-03-27 15:52:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 15:52:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 15:52:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 15:52:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 15:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 749 KB; ProcessInfo: 590 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; TcpIpConnectionsManager: 183 KB; rules::RuleEvaluationCtx: 129 KB; cloudutils::CloudData: 102 KB; rules::ProcessConditionsCache: 89 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4704 KB; 2026-03-27 15:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 710 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::RuleEvaluationCtx: 129 KB; cloudutils::CloudData: 102 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4620 KB; 2026-03-27 15:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 15:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 711 KB; ProcessInfo: 602 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::RuleEvaluationCtx: 129 KB; cloudutils::CloudData: 102 KB; rules::ProcessConditionsCache: 43 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4636 KB; 2026-03-27 15:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 712 KB; ProcessInfo: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 168 KB; rules::RuleEvaluationCtx: 129 KB; cloudutils::CloudData: 102 KB; rules::ProcessConditionsCache: 41 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4622 KB; 2026-03-27 15:57:16 7967594126c0 Info: Events Statistics, From:, 2026-03-27 15:50:15, To:, 2026-03-27 15:57:16, Duration (s):, 421, Events Per Second:, 0.605, Events:, 255, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 241, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 7, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32664 2026-03-27 15:57:17 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s659ms. 2026-03-27 15:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 713 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 455 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 145 KB; rules::RuleEvaluationCtx: 129 KB; cloudutils::CloudData: 102 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4397 KB; 2026-03-27 15:57:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 15:57:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 15:57:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 15:57:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 15:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 715 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 465 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 152 KB; rules::RuleEvaluationCtx: 129 KB; cloudutils::CloudData: 102 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4413 KB; 2026-03-27 15:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 470 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 150 KB; rules::RuleEvaluationCtx: 129 KB; cloudutils::CloudData: 102 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4426 KB; 2026-03-27 15:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 15:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 15:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:00:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 739 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 486 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 152 KB; rules::RuleEvaluationCtx: 130 KB; cloudutils::CloudData: 102 KB; rules::ProcessConditionsCache: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4503 KB; 2026-03-27 16:01:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 706 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 511 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 168 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 117 KB; cloudutils::CloudData: 102 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4578 KB; 2026-03-27 16:02:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 707 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 176 KB; rules::RuleEvaluationCtx: 130 KB; cloudutils::CloudData: 102 KB; rules::ProcessConditionsCache: 82 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4569 KB; 2026-03-27 16:02:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 16:02:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 16:02:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 16:02:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 16:03:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 708 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; TcpIpConnectionsManager: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::RuleEvaluationCtx: 131 KB; rules::ProcessConditionsCache: 113 KB; cloudutils::CloudData: 101 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4677 KB; 2026-03-27 16:04:16 7967594126c0 Info: Events Statistics, From:, 2026-03-27 15:57:28, To:, 2026-03-27 16:04:16, Duration (s):, 408, Events Per Second:, 0.696, Events:, 284, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 225, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 29, Livegrid:, 29, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35492 2026-03-27 16:04:17 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s636ms. 2026-03-27 16:04:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 708 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 500 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; TcpIpConnectionsManager: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::RuleEvaluationCtx: 131 KB; rules::ProcessConditionsCache: 113 KB; cloudutils::CloudData: 101 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4569 KB; 2026-03-27 16:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 16:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:05:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 708 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 500 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 171 KB; rules::RuleEvaluationCtx: 131 KB; rules::ProcessConditionsCache: 113 KB; cloudutils::CloudData: 101 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4545 KB; 2026-03-27 16:06:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 708 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 500 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 150 KB; rules::RuleEvaluationCtx: 131 KB; rules::ProcessConditionsCache: 113 KB; cloudutils::CloudData: 101 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4526 KB; 2026-03-27 16:07:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 708 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 500 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 150 KB; rules::RuleEvaluationCtx: 131 KB; rules::ProcessConditionsCache: 113 KB; cloudutils::CloudData: 101 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4526 KB; 2026-03-27 16:07:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 16:07:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 16:07:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 16:07:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 16:08:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; ProcessInfo: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 297 KB; TcpIpConnectionsManager: 237 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::RuleEvaluationCtx: 132 KB; rules::ProcessConditionsCache: 118 KB; cloudutils::CloudData: 101 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4774 KB; 2026-03-27 16:09:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; ProcessInfo: 681 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 297 KB; TcpIpConnectionsManager: 258 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::RuleEvaluationCtx: 132 KB; rules::ProcessConditionsCache: 118 KB; cloudutils::CloudData: 101 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4899 KB; 2026-03-27 16:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 16:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:10:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 741 KB; ProcessInfo: 693 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 297 KB; TcpIpConnectionsManager: 265 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; rules::RuleEvaluationCtx: 132 KB; cloudutils::CloudData: 101 KB; rules::ProcessConditionsCache: 99 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4924 KB; 2026-03-27 16:11:16 7967594126c0 Info: Events Statistics, From:, 2026-03-27 16:02:55, To:, 2026-03-27 16:11:16, Duration (s):, 501, Events Per Second:, 1.081, Events:, 542, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 537, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 68759 2026-03-27 16:11:17 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s839ms. 2026-03-27 16:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 745 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 543 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 173 KB; rules::RuleEvaluationCtx: 132 KB; rules::ProcessConditionsCache: 108 KB; cloudutils::CloudData: 101 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4629 KB; 2026-03-27 16:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 758 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 547 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 152 KB; rules::RuleEvaluationCtx: 132 KB; rules::ProcessConditionsCache: 103 KB; cloudutils::CloudData: 102 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4626 KB; 2026-03-27 16:12:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 16:12:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 16:12:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 16:12:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 16:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 739 KB; ProcessInfo: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 297 KB; CacheEntry: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 170 KB; rules::RuleEvaluationCtx: 132 KB; rules::ProcessConditionsCache: 127 KB; cloudutils::CloudData: 102 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4693 KB; 2026-03-27 16:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; ProcessInfo: 618 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 214 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; rules::ProcessConditionsCache: 157 KB; rules::RuleEvaluationCtx: 132 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4830 KB; 2026-03-27 16:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 16:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; ProcessInfo: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 299 KB; TcpIpConnectionsManager: 222 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::RuleEvaluationCtx: 132 KB; rules::ProcessConditionsCache: 109 KB; cloudutils::CloudData: 104 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4802 KB; 2026-03-27 16:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; ProcessInfo: 690 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 140 KB; rules::RuleEvaluationCtx: 132 KB; cloudutils::CloudData: 104 KB; BaseEvent: 40 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4904 KB; 2026-03-27 16:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; ProcessInfo: 705 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 178 KB; rules::ProcessConditionsCache: 140 KB; rules::RuleEvaluationCtx: 132 KB; cloudutils::CloudData: 104 KB; BaseEvent: 48 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4909 KB; 2026-03-27 16:17:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 16:17:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 16:17:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 16:17:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 16:18:16 7967594126c0 Info: Events Statistics, From:, 2026-03-27 16:11:13, To:, 2026-03-27 16:18:16, Duration (s):, 423, Events Per Second:, 1.042, Events:, 441, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 436, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53980 2026-03-27 16:18:17 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s875ms. 2026-03-27 16:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 729 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 512 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 140 KB; rules::RuleEvaluationCtx: 132 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4610 KB; 2026-03-27 16:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 732 KB; ProcessInfo: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 214 KB; TcpIpConnectionsManager: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4812 KB; 2026-03-27 16:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 16:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 731 KB; ProcessInfo: 572 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 140 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4742 KB; 2026-03-27 16:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 930 KB; ProcessInfo: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 146 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4957 KB; 2026-03-27 16:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1139 KB; ProcessInfo: 612 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 209 KB; rules::ProcessConditionsCache: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 5282 KB; 2026-03-27 16:22:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 16:22:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 16:22:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 16:22:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 16:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 1531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1363 KB; ProcessInfo: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 173 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 5494 KB; 2026-03-27 16:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1644 KB; ModuleMetadata: 1531 KB; ProcessInfo: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 149 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 5753 KB; 2026-03-27 16:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 16:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:25:16 7967594126c0 Info: Events Statistics, From:, 2026-03-27 16:18:21, To:, 2026-03-27 16:25:16, Duration (s):, 415, Events Per Second:, 0.857, Events:, 356, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 351, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44079 2026-03-27 16:25:17 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s780ms. 2026-03-27 16:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1868 KB; ModuleMetadata: 1531 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 494 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 184 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 151 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 5774 KB; 2026-03-27 16:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2178 KB; ModuleMetadata: 1531 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 518 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 173 KB; rules::ProcessConditionsCache: 153 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6107 KB; 2026-03-27 16:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2472 KB; ModuleMetadata: 1531 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 519 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 177 KB; TcpIpConnectionsManager: 166 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6426 KB; 2026-03-27 16:27:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 16:27:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 16:27:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 16:27:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 16:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2686 KB; ModuleMetadata: 1531 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 546 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 173 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; BaseEvent: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6774 KB; 2026-03-27 16:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2793 KB; ModuleMetadata: 1531 KB; ProcessInfo: 599 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 299 KB; rules::ProcessConditionsCache: 251 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; BaseEvent: 78 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7040 KB; 2026-03-27 16:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 16:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2824 KB; ModuleMetadata: 1531 KB; ProcessInfo: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 299 KB; rules::ProcessConditionsCache: 232 KB; TcpIpConnectionsManager: 227 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; BaseEvent: 98 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7121 KB; 2026-03-27 16:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2824 KB; ModuleMetadata: 1531 KB; ProcessInfo: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 214 KB; TcpIpConnectionsManager: 214 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; BaseEvent: 99 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7095 KB; 2026-03-27 16:32:16 7967594126c0 Info: Events Statistics, From:, 2026-03-27 16:25:41, To:, 2026-03-27 16:32:16, Duration (s):, 395, Events Per Second:, 1.428, Events:, 565, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 358, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 98, Livegrid:, 98, OriginUrl:, 0, Alarms:, 10, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 61710 2026-03-27 16:32:17 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s791ms. 2026-03-27 16:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2830 KB; ModuleMetadata: 1531 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 496 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 178 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6796 KB; 2026-03-27 16:32:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 16:32:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 16:32:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 16:32:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 16:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2830 KB; ModuleMetadata: 1531 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 497 KB; ModuleInfoCache: 299 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 219 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 142 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6772 KB; 2026-03-27 16:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2812 KB; ModuleMetadata: 1531 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 299 KB; rules::ProcessConditionsCache: 254 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 165 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6847 KB; 2026-03-27 16:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 16:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2814 KB; ModuleMetadata: 1532 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 527 KB; ModuleInfoCache: 300 KB; rules::ProcessConditionsCache: 221 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 165 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6819 KB; 2026-03-27 16:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2815 KB; ModuleMetadata: 1532 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; ModuleInfoCache: 300 KB; rules::ProcessConditionsCache: 232 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6883 KB; 2026-03-27 16:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2817 KB; ModuleMetadata: 1532 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; ModuleInfoCache: 300 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 219 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 171 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6856 KB; 2026-03-27 16:37:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 16:37:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 16:37:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 16:37:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 16:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2816 KB; ModuleMetadata: 1532 KB; ProcessInfo: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 219 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 181 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6894 KB; 2026-03-27 16:39:16 7967594126c0 Info: Events Statistics, From:, 2026-03-27 16:33:14, To:, 2026-03-27 16:39:16, Duration (s):, 362, Events Per Second:, 0.943, Events:, 342, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 324, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43017 2026-03-27 16:39:17 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s773ms. 2026-03-27 16:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2818 KB; ModuleMetadata: 1532 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; ModuleInfoCache: 300 KB; rules::ProcessConditionsCache: 268 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6893 KB; 2026-03-27 16:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 16:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2819 KB; ModuleMetadata: 1532 KB; ProcessInfo: 600 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; rules::ProcessConditionsCache: 257 KB; TcpIpConnectionsManager: 222 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7052 KB; 2026-03-27 16:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2822 KB; ModuleMetadata: 1532 KB; ProcessInfo: 602 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; rules::ProcessConditionsCache: 251 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::RuleEvaluationCtx: 133 KB; cloudutils::CloudData: 104 KB; BaseEvent: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7032 KB; 2026-03-27 16:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2810 KB; ModuleMetadata: 1532 KB; ProcessInfo: 699 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 356 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 237 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 103 KB; BaseEvent: 102 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7401 KB; 2026-03-27 16:42:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 16:42:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 16:42:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 16:42:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 16:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2832 KB; ModuleMetadata: 1532 KB; ProcessInfo: 703 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 362 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 237 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 180 KB; BaseEvent: 104 KB; cloudutils::CloudData: 103 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7410 KB; 2026-03-27 16:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2949 KB; ModuleMetadata: 1534 KB; ProcessInfo: 728 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 360 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 111 KB; cloudutils::CloudData: 103 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7587 KB; 2026-03-27 16:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 16:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2893 KB; ModuleMetadata: 1534 KB; ProcessInfo: 734 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 360 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 163 KB; BaseEvent: 111 KB; cloudutils::CloudData: 103 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7497 KB; 2026-03-27 16:46:17 7967594126c0 Info: Events Statistics, From:, 2026-03-27 16:39:16, To:, 2026-03-27 16:46:16, Duration (s):, 420, Events Per Second:, 1.651, Events:, 695, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 526, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 62, Livegrid:, 62, OriginUrl:, 0, Alarms:, 44, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 80983 2026-03-27 16:46:18 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s848ms. 2026-03-27 16:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2895 KB; ModuleMetadata: 1534 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; rules::ProcessConditionsCache: 360 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 103 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7082 KB; 2026-03-27 16:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2896 KB; ModuleMetadata: 1534 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 497 KB; rules::ProcessConditionsCache: 415 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 155 KB; cloudutils::CloudData: 103 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7170 KB; 2026-03-27 16:47:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 16:47:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 16:47:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 16:47:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 16:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2876 KB; ModuleMetadata: 1534 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 521 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 183 KB; cloudutils::CloudData: 103 KB; rules::ProcessConditionsCache: 73 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6856 KB; 2026-03-27 16:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2839 KB; ModuleMetadata: 1534 KB; ProcessInfo: 666 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; TcpIpConnectionsManager: 245 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 194 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 103 KB; BaseEvent: 82 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7240 KB; 2026-03-27 16:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 16:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1534 KB; ProcessInfo: 885 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 365 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; BaseEvent: 172 KB; cloudutils::CloudData: 103 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 13 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7398 KB; 2026-03-27 16:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1534 KB; ProcessInfo: 910 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 357 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; BaseEvent: 182 KB; cloudutils::CloudData: 103 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7461 KB; 2026-03-27 16:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 1534 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; TcpIpConnectionsManager: 286 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; BaseEvent: 186 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; cloudutils::CloudData: 103 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7379 KB; 2026-03-27 16:52:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 16:52:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 16:52:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 16:52:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 16:53:17 7967594126c0 Info: Events Statistics, From:, 2026-03-27 16:46:39, To:, 2026-03-27 16:53:17, Duration (s):, 398, Events Per Second:, 3.024, Events:, 1204, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1054, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 149, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 136512 2026-03-27 16:53:18 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s065ms. 2026-03-27 16:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1534 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 517 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 181 KB; cloudutils::CloudData: 103 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6640 KB; 2026-03-27 16:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1534 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 518 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 147 KB; cloudutils::CloudData: 103 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6618 KB; 2026-03-27 16:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 16:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1534 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 137 KB; cloudutils::CloudData: 103 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6611 KB; 2026-03-27 16:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1534 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 528 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 140 KB; cloudutils::CloudData: 103 KB; rules::ProcessConditionsCache: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6638 KB; 2026-03-27 16:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1534 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 528 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 103 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6632 KB; 2026-03-27 16:58:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 16:58:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 16:58:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 16:58:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 16:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1534 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 553 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 165 KB; cloudutils::CloudData: 103 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6682 KB; 2026-03-27 16:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1534 KB; ProcessInfo: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 245 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 168 KB; cloudutils::CloudData: 103 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6694 KB; 2026-03-27 16:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 16:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 16:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:00:17 7967594126c0 Info: Events Statistics, From:, 2026-03-27 16:53:41, To:, 2026-03-27 17:00:17, Duration (s):, 396, Events Per Second:, 0.669, Events:, 265, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 258, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34607 2026-03-27 17:00:18 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s624ms. 2026-03-27 17:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1534 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 534 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6770 KB; 2026-03-27 17:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1534 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 534 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 71 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6705 KB; 2026-03-27 17:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1534 KB; ProcessInfo: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 128 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6828 KB; 2026-03-27 17:03:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 17:03:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 17:03:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 17:03:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 17:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1534 KB; ProcessInfo: 590 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 84 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6801 KB; 2026-03-27 17:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1534 KB; ProcessInfo: 596 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 82 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6798 KB; 2026-03-27 17:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 17:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1534 KB; ProcessInfo: 621 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 186 KB; rules::ProcessConditionsCache: 120 KB; cloudutils::CloudData: 104 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6883 KB; 2026-03-27 17:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 1534 KB; ProcessInfo: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; TcpIpConnectionsManager: 165 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 80 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6819 KB; 2026-03-27 17:07:17 7967594126c0 Info: Events Statistics, From:, 2026-03-27 17:00:17, To:, 2026-03-27 17:07:17, Duration (s):, 420, Events Per Second:, 1.013, Events:, 426, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 413, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56829 2026-03-27 17:07:18 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s852ms. 2026-03-27 17:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1535 KB; ProcessInfo: 564 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 174 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 71 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6776 KB; 2026-03-27 17:08:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 17:08:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 17:08:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 17:08:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 17:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1535 KB; ProcessInfo: 619 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; TcpIpConnectionsManager: 270 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 104 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7043 KB; 2026-03-27 17:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1535 KB; ProcessInfo: 690 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; TcpIpConnectionsManager: 271 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 141 KB; cloudutils::CloudData: 104 KB; BaseEvent: 50 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7101 KB; 2026-03-27 17:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 17:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1535 KB; ProcessInfo: 724 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; TcpIpConnectionsManager: 281 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 152 KB; cloudutils::CloudData: 104 KB; BaseEvent: 58 KB; ProcessInfoCommandLineTag: 27 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7175 KB; 2026-03-27 17:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1535 KB; ProcessInfo: 749 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; TcpIpConnectionsManager: 250 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 126 KB; cloudutils::CloudData: 104 KB; BaseEvent: 65 KB; BatchSerializer::EventsQueueTag: 28 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7152 KB; 2026-03-27 17:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1535 KB; ProcessInfo: 749 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 111 KB; cloudutils::CloudData: 104 KB; BaseEvent: 69 KB; BatchSerializer::EventsQueueTag: 30 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7101 KB; 2026-03-27 17:13:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 17:13:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 17:13:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 17:13:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 17:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 1535 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 300 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; rules::ProcessConditionsCache: 115 KB; cloudutils::CloudData: 104 KB; BaseEvent: 77 KB; BatchSerializer::EventsQueueTag: 33 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7140 KB; 2026-03-27 17:14:17 7967594126c0 Info: Events Statistics, From:, 2026-03-27 17:07:17, To:, 2026-03-27 17:14:17, Duration (s):, 420, Events Per Second:, 2.109, Events:, 887, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 786, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 48, Livegrid:, 48, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 107260 2026-03-27 17:14:19 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s020ms. 2026-03-27 17:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 1535 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 536 KB; ModuleInfoCache: 301 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 168 KB; rules::ProcessConditionsCache: 142 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6785 KB; 2026-03-27 17:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 17:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2751 KB; ModuleMetadata: 1535 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 537 KB; ModuleInfoCache: 301 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 163 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6794 KB; 2026-03-27 17:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2756 KB; ModuleMetadata: 1535 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 537 KB; ModuleInfoCache: 301 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 144 KB; TcpIpConnectionsManager: 140 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6780 KB; 2026-03-27 17:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2761 KB; ModuleMetadata: 1535 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; ModuleInfoCache: 301 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 151 KB; TcpIpConnectionsManager: 137 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6801 KB; 2026-03-27 17:18:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 17:18:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 17:18:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 17:18:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 17:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 1535 KB; ProcessInfo: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 161 KB; rules::ProcessConditionsCache: 152 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6853 KB; 2026-03-27 17:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2772 KB; ModuleMetadata: 1535 KB; ProcessInfo: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 161 KB; rules::ProcessConditionsCache: 152 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6864 KB; 2026-03-27 17:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 17:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2776 KB; ModuleMetadata: 1535 KB; ProcessInfo: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 169 KB; TcpIpConnectionsManager: 163 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6910 KB; 2026-03-27 17:21:19 7967594126c0 Info: Events Statistics, From:, 2026-03-27 17:14:15, To:, 2026-03-27 17:21:18, Duration (s):, 423, Events Per Second:, 7.977, Events:, 3375, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3366, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 463191 2026-03-27 17:21:22 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s330ms. 2026-03-27 17:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2781 KB; ProcessInfo: 1865 KB; ModuleMetadata: 1535 KB; rules::AncestorEvaluations: 555 KB; ProcessInfoCommandLineTag: 467 KB; ModuleInfoCache: 301 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 137 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8504 KB; 2026-03-27 17:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2780 KB; ProcessInfo: 1890 KB; ModuleMetadata: 1535 KB; rules::AncestorEvaluations: 555 KB; ProcessInfoCommandLineTag: 467 KB; ModuleInfoCache: 301 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; TcpIpConnectionsManager: 163 KB; rules::ProcessConditionsCache: 139 KB; cloudutils::CloudData: 104 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8645 KB; 2026-03-27 17:23:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 17:23:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 17:23:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 17:23:03 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 17:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2781 KB; ProcessInfo: 1913 KB; ModuleMetadata: 1535 KB; rules::AncestorEvaluations: 555 KB; ProcessInfoCommandLineTag: 467 KB; ModuleInfoCache: 301 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 188 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 82 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8632 KB; 2026-03-27 17:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2808 KB; ProcessInfo: 1925 KB; ModuleMetadata: 1535 KB; rules::AncestorEvaluations: 555 KB; ProcessInfoCommandLineTag: 468 KB; ModuleInfoCache: 301 KB; rules::RuleEvaluationCtx: 246 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 73 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8680 KB; 2026-03-27 17:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 17:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2790 KB; ProcessInfo: 1997 KB; ModuleMetadata: 1535 KB; rules::AncestorEvaluations: 556 KB; ProcessInfoCommandLineTag: 468 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 276 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 104 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9168 KB; 2026-03-27 17:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2789 KB; ProcessInfo: 1998 KB; ModuleMetadata: 1535 KB; rules::AncestorEvaluations: 555 KB; ProcessInfoCommandLineTag: 467 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 230 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 74 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9003 KB; 2026-03-27 17:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2792 KB; ProcessInfo: 2000 KB; ModuleMetadata: 1535 KB; rules::AncestorEvaluations: 555 KB; ProcessInfoCommandLineTag: 467 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 74 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8994 KB; 2026-03-27 17:28:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 17:28:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 17:28:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 17:28:03 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 17:28:20 7967594126c0 Info: Events Statistics, From:, 2026-03-27 17:21:47, To:, 2026-03-27 17:28:20, Duration (s):, 393, Events Per Second:, 1.038, Events:, 408, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 407, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51691 2026-03-27 17:28:21 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s777ms. 2026-03-27 17:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2795 KB; ModuleMetadata: 1535 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; rules::ProcessConditionsCache: 141 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7368 KB; 2026-03-27 17:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2797 KB; ModuleMetadata: 1535 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 91 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7330 KB; 2026-03-27 17:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 17:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2798 KB; ModuleMetadata: 1535 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 115 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7422 KB; 2026-03-27 17:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2800 KB; ModuleMetadata: 1535 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 235 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 117 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7497 KB; 2026-03-27 17:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2787 KB; ModuleMetadata: 1535 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7457 KB; 2026-03-27 17:33:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 17:33:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 17:33:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 17:33:03 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 17:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2789 KB; ModuleMetadata: 1535 KB; ProcessInfo: 882 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7464 KB; 2026-03-27 17:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2790 KB; ModuleMetadata: 1535 KB; ProcessInfo: 928 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 219 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 135 KB; cloudutils::CloudData: 104 KB; BaseEvent: 52 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7595 KB; 2026-03-27 17:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 17:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:35:20 7967594126c0 Info: Events Statistics, From:, 2026-03-27 17:28:19, To:, 2026-03-27 17:35:20, Duration (s):, 421, Events Per Second:, 1.084, Events:, 457, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 456, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 59223 2026-03-27 17:35:22 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s875ms. 2026-03-27 17:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2794 KB; ModuleMetadata: 1535 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7302 KB; 2026-03-27 17:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2795 KB; ModuleMetadata: 1535 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 194 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 104 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7309 KB; 2026-03-27 17:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2796 KB; ModuleMetadata: 1535 KB; ProcessInfo: 981 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 280 KB; TcpIpConnectionsManager: 271 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 104 KB; BaseEvent: 93 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7891 KB; 2026-03-27 17:38:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 17:38:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 17:38:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 17:38:04 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 17:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2818 KB; ModuleMetadata: 1535 KB; ProcessInfo: 981 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 265 KB; TcpIpConnectionsManager: 255 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 104 KB; BaseEvent: 95 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7884 KB; 2026-03-27 17:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2856 KB; ModuleMetadata: 1535 KB; ProcessInfo: 1023 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 271 KB; TcpIpConnectionsManager: 252 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; BaseEvent: 105 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7992 KB; 2026-03-27 17:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 17:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2822 KB; ModuleMetadata: 1535 KB; ProcessInfo: 1047 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 300 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 157 KB; BaseEvent: 115 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7934 KB; 2026-03-27 17:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2805 KB; ModuleMetadata: 1535 KB; ProcessInfo: 1051 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 291 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 155 KB; BaseEvent: 118 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7918 KB; 2026-03-27 17:42:20 7967594126c0 Info: Events Statistics, From:, 2026-03-27 17:35:33, To:, 2026-03-27 17:42:20, Duration (s):, 407, Events Per Second:, 1.828, Events:, 745, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 671, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 71, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 90341 2026-03-27 17:42:22 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s893ms. 2026-03-27 17:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2800 KB; ModuleMetadata: 1535 KB; ProcessInfo: 774 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 294 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; TcpIpConnectionsManager: 160 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7491 KB; 2026-03-27 17:43:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 17:43:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 17:43:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 17:43:04 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 17:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2829 KB; ModuleMetadata: 1535 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 300 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7536 KB; 2026-03-27 17:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2835 KB; ModuleMetadata: 1537 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; rules::ProcessConditionsCache: 302 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; TcpIpConnectionsManager: 155 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7561 KB; 2026-03-27 17:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 17:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2839 KB; ModuleMetadata: 1537 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 300 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7570 KB; 2026-03-27 17:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2844 KB; ModuleMetadata: 1537 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; rules::ProcessConditionsCache: 302 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; TcpIpConnectionsManager: 168 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7605 KB; 2026-03-27 17:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2849 KB; ModuleMetadata: 1537 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; rules::ProcessConditionsCache: 346 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7710 KB; 2026-03-27 17:48:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 17:48:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 17:48:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 17:48:07 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 17:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2855 KB; ModuleMetadata: 1537 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 300 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7699 KB; 2026-03-27 17:49:20 7967594126c0 Info: Events Statistics, From:, 2026-03-27 17:42:27, To:, 2026-03-27 17:49:20, Duration (s):, 413, Events Per Second:, 1.339, Events:, 554, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 496, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 57, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 66586 2026-03-27 17:49:22 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s862ms. 2026-03-27 17:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2864 KB; ModuleMetadata: 1537 KB; ProcessInfo: 885 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 242 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7485 KB; 2026-03-27 17:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 17:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2848 KB; ModuleMetadata: 1537 KB; ProcessInfo: 1097 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; TcpIpConnectionsManager: 349 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 256 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 105 KB; BaseEvent: 93 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8129 KB; 2026-03-27 17:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2852 KB; ModuleMetadata: 1537 KB; ProcessInfo: 1191 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; TcpIpConnectionsManager: 381 KB; rules::ProcessConditionsCache: 349 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; BaseEvent: 125 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8401 KB; 2026-03-27 17:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2869 KB; ModuleMetadata: 1537 KB; ProcessInfo: 1194 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; TcpIpConnectionsManager: 330 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 300 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 129 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8319 KB; 2026-03-27 17:53:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 17:53:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 17:53:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 17:53:07 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 17:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2871 KB; ModuleMetadata: 1537 KB; ProcessInfo: 1201 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; rules::ProcessConditionsCache: 307 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; BaseEvent: 146 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8247 KB; 2026-03-27 17:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2871 KB; ModuleMetadata: 1537 KB; ProcessInfo: 1214 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 470 KB; rules::ProcessConditionsCache: 303 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 180 KB; BaseEvent: 153 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8226 KB; 2026-03-27 17:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 17:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2872 KB; ModuleMetadata: 1537 KB; ProcessInfo: 1242 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; rules::ProcessConditionsCache: 325 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 181 KB; BaseEvent: 160 KB; cloudutils::CloudData: 105 KB; BatchSerializer::EventsQueueTag: 49 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8287 KB; 2026-03-27 17:56:21 7967594126c0 Info: Events Statistics, From:, 2026-03-27 17:49:13, To:, 2026-03-27 17:56:20, Duration (s):, 427, Events Per Second:, 2.374, Events:, 1016, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 874, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 95, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 117534 2026-03-27 17:56:22 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s963ms. 2026-03-27 17:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2913 KB; ModuleMetadata: 1537 KB; ProcessInfo: 750 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; rules::ProcessConditionsCache: 303 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7598 KB; 2026-03-27 17:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2916 KB; ModuleMetadata: 1537 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; rules::ProcessConditionsCache: 375 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 196 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7809 KB; 2026-03-27 17:58:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 17:58:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 17:58:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 17:58:07 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 17:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2878 KB; ModuleMetadata: 1537 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 260 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 130 KB; cloudutils::CloudData: 105 KB; BaseEvent: 78 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7775 KB; 2026-03-27 17:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2881 KB; ModuleMetadata: 1537 KB; ProcessInfo: 963 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 266 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 119 KB; cloudutils::CloudData: 105 KB; BaseEvent: 82 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7799 KB; 2026-03-27 17:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 17:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 17:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2883 KB; ModuleMetadata: 1537 KB; ProcessInfo: 987 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 248 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 123 KB; cloudutils::CloudData: 105 KB; BaseEvent: 91 KB; ProcessInfoCommandLineTag: 49 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7821 KB; 2026-03-27 18:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2887 KB; ModuleMetadata: 1537 KB; ProcessInfo: 1098 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 220 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; BaseEvent: 116 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8055 KB; 2026-03-27 18:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2873 KB; ModuleMetadata: 1537 KB; ProcessInfo: 1126 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 225 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; BaseEvent: 127 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8064 KB; 2026-03-27 18:03:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 18:03:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 18:03:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 18:03:08 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 18:03:21 7967594126c0 Info: Events Statistics, From:, 2026-03-27 17:56:22, To:, 2026-03-27 18:03:21, Duration (s):, 419, Events Per Second:, 2.473, Events:, 1037, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 968, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 66, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 123368 2026-03-27 18:03:22 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s970ms. 2026-03-27 18:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2877 KB; ModuleMetadata: 1537 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 229 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 213 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7652 KB; 2026-03-27 18:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2879 KB; ModuleMetadata: 1537 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; TcpIpConnectionsManager: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7589 KB; 2026-03-27 18:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 18:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2900 KB; ModuleMetadata: 1537 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 181 KB; rules::ProcessConditionsCache: 173 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7607 KB; 2026-03-27 18:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2901 KB; ModuleMetadata: 1537 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 169 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7588 KB; 2026-03-27 18:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2900 KB; ModuleMetadata: 1537 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 167 KB; TcpIpConnectionsManager: 142 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7567 KB; 2026-03-27 18:08:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 18:08:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 18:08:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 18:08:08 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 18:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2882 KB; ModuleMetadata: 1537 KB; ProcessInfo: 904 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 167 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7597 KB; 2026-03-27 18:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2884 KB; ModuleMetadata: 1537 KB; ProcessInfo: 947 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 171 KB; TcpIpConnectionsManager: 160 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 59 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7668 KB; 2026-03-27 18:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 18:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:10:21 7967594126c0 Info: Events Statistics, From:, 2026-03-27 18:03:20, To:, 2026-03-27 18:10:21, Duration (s):, 421, Events Per Second:, 0.576, Events:, 243, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 242, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33819 2026-03-27 18:10:22 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s636ms. 2026-03-27 18:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2885 KB; ModuleMetadata: 1537 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 178 KB; TcpIpConnectionsManager: 160 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7467 KB; 2026-03-27 18:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1537 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 178 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7446 KB; 2026-03-27 18:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2875 KB; ModuleMetadata: 1537 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 178 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7436 KB; 2026-03-27 18:13:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 18:13:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 18:13:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 18:13:08 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 18:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2894 KB; ModuleMetadata: 1537 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 182 KB; TcpIpConnectionsManager: 145 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7482 KB; 2026-03-27 18:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 3053 KB; ModuleMetadata: 1537 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 180 KB; TcpIpConnectionsManager: 145 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7643 KB; 2026-03-27 18:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 18:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 3034 KB; ModuleMetadata: 1537 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 180 KB; TcpIpConnectionsManager: 147 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7632 KB; 2026-03-27 18:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 3035 KB; ModuleMetadata: 1537 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 182 KB; TcpIpConnectionsManager: 137 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7627 KB; 2026-03-27 18:17:21 7967594126c0 Info: Events Statistics, From:, 2026-03-27 18:10:45, To:, 2026-03-27 18:17:21, Duration (s):, 396, Events Per Second:, 0.144, Events:, 57, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 56, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10351 2026-03-27 18:17:22 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s629ms. 2026-03-27 18:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 3038 KB; ModuleMetadata: 1537 KB; ProcessInfo: 716 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; rules::ProcessConditionsCache: 186 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7541 KB; 2026-03-27 18:18:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 18:18:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 18:18:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 18:18:08 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 18:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 3020 KB; ModuleMetadata: 1537 KB; ProcessInfo: 716 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; rules::ProcessConditionsCache: 186 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7522 KB; 2026-03-27 18:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2942 KB; ModuleMetadata: 1537 KB; ProcessInfo: 728 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 147 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7467 KB; 2026-03-27 18:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 18:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2944 KB; ModuleMetadata: 1537 KB; ProcessInfo: 734 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 147 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7490 KB; 2026-03-27 18:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2925 KB; ModuleMetadata: 1537 KB; ProcessInfo: 735 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 150 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7477 KB; 2026-03-27 18:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2873 KB; ModuleMetadata: 1537 KB; ProcessInfo: 747 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7444 KB; 2026-03-27 18:23:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 18:23:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 18:23:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 18:23:08 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 18:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2877 KB; ModuleMetadata: 1537 KB; ProcessInfo: 754 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7468 KB; 2026-03-27 18:24:21 7967594126c0 Info: Events Statistics, From:, 2026-03-27 18:17:26, To:, 2026-03-27 18:24:21, Duration (s):, 415, Events Per Second:, 0.387, Events:, 161, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 160, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21985 2026-03-27 18:24:22 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s631ms. 2026-03-27 18:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2878 KB; ModuleMetadata: 1537 KB; ProcessInfo: 749 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7463 KB; 2026-03-27 18:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 18:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2879 KB; ModuleMetadata: 1537 KB; ProcessInfo: 754 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 173 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7471 KB; 2026-03-27 18:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2882 KB; ModuleMetadata: 1537 KB; ProcessInfo: 757 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 168 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7477 KB; 2026-03-27 18:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2902 KB; ModuleMetadata: 1537 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 145 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7480 KB; 2026-03-27 18:28:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 18:28:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 18:28:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 18:28:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 18:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2884 KB; ModuleMetadata: 1537 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 153 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7473 KB; 2026-03-27 18:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2887 KB; ModuleMetadata: 1539 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 236 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 178 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7579 KB; 2026-03-27 18:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 18:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1539 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 173 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7536 KB; 2026-03-27 18:31:21 7967594126c0 Info: Events Statistics, From:, 2026-03-27 18:24:32, To:, 2026-03-27 18:31:21, Duration (s):, 409, Events Per Second:, 0.364, Events:, 149, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 148, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20807 2026-03-27 18:31:22 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s698ms. 2026-03-27 18:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2888 KB; ModuleMetadata: 1539 KB; ProcessInfo: 741 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 163 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7459 KB; 2026-03-27 18:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2875 KB; ModuleMetadata: 1539 KB; ProcessInfo: 743 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 153 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7438 KB; 2026-03-27 18:33:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 18:33:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 18:33:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 18:33:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 18:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2876 KB; ModuleMetadata: 1539 KB; ProcessInfo: 778 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 232 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 178 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7538 KB; 2026-03-27 18:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2877 KB; ModuleMetadata: 1539 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 220 KB; rules::ProcessConditionsCache: 214 KB; TcpIpConnectionsManager: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7576 KB; 2026-03-27 18:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 18:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2880 KB; ModuleMetadata: 1539 KB; ProcessInfo: 869 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 278 KB; TcpIpConnectionsManager: 252 KB; CacheEntry: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7793 KB; 2026-03-27 18:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2883 KB; ModuleMetadata: 1540 KB; ProcessInfo: 1114 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 470 KB; TcpIpConnectionsManager: 358 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; rules::ProcessConditionsCache: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; BaseEvent: 139 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8227 KB; 2026-03-27 18:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2903 KB; ModuleMetadata: 1540 KB; ProcessInfo: 1125 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 470 KB; TcpIpConnectionsManager: 339 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; BaseEvent: 149 KB; rules::ProcessConditionsCache: 119 KB; cloudutils::CloudData: 105 KB; BatchSerializer::EventsQueueTag: 48 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8150 KB; 2026-03-27 18:38:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 18:38:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 18:38:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 18:38:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 18:38:21 7967594126c0 Info: Events Statistics, From:, 2026-03-27 18:31:45, To:, 2026-03-27 18:38:21, Duration (s):, 396, Events Per Second:, 2.703, Events:, 1072, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 963, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 104, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 122547 2026-03-27 18:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2894 KB; ModuleMetadata: 1540 KB; ProcessInfo: 987 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; TcpIpConnectionsManager: 311 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BatchStringTag: 119 KB; cloudutils::CloudData: 105 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; Total: 7875 KB; 2026-03-27 18:38:23 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s044ms. 2026-03-27 18:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2896 KB; ModuleMetadata: 1540 KB; ProcessInfo: 1048 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 112 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7769 KB; 2026-03-27 18:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 18:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2914 KB; ModuleMetadata: 1540 KB; ProcessInfo: 1086 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; rules::ProcessConditionsCache: 120 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7835 KB; 2026-03-27 18:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2914 KB; ModuleMetadata: 1540 KB; ProcessInfo: 1114 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 224 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 123 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7893 KB; 2026-03-27 18:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2902 KB; ModuleMetadata: 1539 KB; ProcessInfo: 1119 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 120 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7874 KB; 2026-03-27 18:43:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 18:43:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 18:43:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 18:43:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 18:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2885 KB; ModuleMetadata: 1539 KB; ProcessInfo: 1142 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 193 KB; rules::ProcessConditionsCache: 158 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7923 KB; 2026-03-27 18:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1539 KB; ProcessInfo: 1144 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 120 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 50 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7863 KB; 2026-03-27 18:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 18:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:45:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 18:38:21, To:, 2026-03-27 18:45:22, Duration (s):, 421, Events Per Second:, 2.760, Events:, 1162, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1030, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 1, OriginUrl:, 0, Alarms:, 128, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 134317 2026-03-27 18:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2889 KB; ModuleMetadata: 1539 KB; ProcessInfo: 1006 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; rules::ProcessConditionsCache: 415 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 278 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; BatchStringTag: 131 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 8189 KB; 2026-03-27 18:45:23 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s989ms. 2026-03-27 18:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2890 KB; ModuleMetadata: 1539 KB; ProcessInfo: 1176 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; TcpIpConnectionsManager: 335 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; rules::ProcessConditionsCache: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 105 KB; BaseEvent: 82 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8194 KB; 2026-03-27 18:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2890 KB; ModuleMetadata: 1539 KB; ProcessInfo: 1182 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; TcpIpConnectionsManager: 327 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; rules::ProcessConditionsCache: 214 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 105 KB; BaseEvent: 84 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8188 KB; 2026-03-27 18:48:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 18:48:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 18:48:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 18:48:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 18:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2892 KB; ModuleMetadata: 1539 KB; ProcessInfo: 1182 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 216 KB; rules::ProcessConditionsCache: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 105 KB; BaseEvent: 86 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8085 KB; 2026-03-27 18:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2892 KB; ModuleMetadata: 1539 KB; ProcessInfo: 1194 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; rules::ProcessConditionsCache: 214 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 155 KB; cloudutils::CloudData: 105 KB; BaseEvent: 90 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8031 KB; 2026-03-27 18:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 18:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2894 KB; ModuleMetadata: 1539 KB; ProcessInfo: 1222 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 254 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 105 KB; BaseEvent: 94 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8136 KB; 2026-03-27 18:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2897 KB; ModuleMetadata: 1539 KB; ProcessInfo: 1223 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 225 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 176 KB; cloudutils::CloudData: 105 KB; BaseEvent: 97 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8111 KB; 2026-03-27 18:52:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 18:45:23, To:, 2026-03-27 18:52:22, Duration (s):, 419, Events Per Second:, 1.605, Events:, 673, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 589, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 83, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 81849 2026-03-27 18:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1539 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 470 KB; rules::ProcessConditionsCache: 321 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; cloudutils::CloudData: 105 KB; BatchStringTag: 79 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 7771 KB; 2026-03-27 18:52:23 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s865ms. 2026-03-27 18:53:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 18:53:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 18:53:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 18:53:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 18:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2884 KB; ModuleMetadata: 1539 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 224 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7567 KB; 2026-03-27 18:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1539 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; rules::ProcessConditionsCache: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7556 KB; 2026-03-27 18:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 18:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2887 KB; ModuleMetadata: 1539 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; rules::ProcessConditionsCache: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7545 KB; 2026-03-27 18:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2888 KB; ModuleMetadata: 1539 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 273 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 165 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7636 KB; 2026-03-27 18:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2890 KB; ModuleMetadata: 1539 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 227 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7591 KB; 2026-03-27 18:58:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 18:58:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 18:58:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 18:58:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 18:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2891 KB; ModuleMetadata: 1539 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; rules::ProcessConditionsCache: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 171 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7595 KB; 2026-03-27 18:59:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 18:52:22, To:, 2026-03-27 18:59:22, Duration (s):, 420, Events Per Second:, 0.421, Events:, 177, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 176, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27467 2026-03-27 18:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2911 KB; ModuleMetadata: 1539 KB; ProcessInfo: 746 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 226 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 176 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; BatchStringTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 7549 KB; 2026-03-27 18:59:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s581ms. 2026-03-27 18:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 18:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 18:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2913 KB; ModuleMetadata: 1539 KB; ProcessInfo: 757 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 240 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7534 KB; 2026-03-27 19:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2915 KB; ModuleMetadata: 1539 KB; ProcessInfo: 759 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 242 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7541 KB; 2026-03-27 19:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2902 KB; ModuleMetadata: 1539 KB; ProcessInfo: 759 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 242 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 137 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7522 KB; 2026-03-27 19:03:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 19:03:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 19:03:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 19:03:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 19:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2903 KB; ModuleMetadata: 1539 KB; ProcessInfo: 759 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 240 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7520 KB; 2026-03-27 19:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2923 KB; ModuleMetadata: 1539 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 242 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; TcpIpConnectionsManager: 137 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7549 KB; 2026-03-27 19:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 19:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:true, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2926 KB; ModuleMetadata: 1539 KB; ProcessInfo: 763 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 242 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; TcpIpConnectionsManager: 137 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7557 KB; 2026-03-27 19:06:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 18:59:28, To:, 2026-03-27 19:06:22, Duration (s):, 414, Events Per Second:, 0.116, Events:, 48, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 47, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8828 2026-03-27 19:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2927 KB; ModuleMetadata: 1539 KB; ProcessInfo: 715 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 247 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; TcpIpConnectionsManager: 137 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 7515 KB; 2026-03-27 19:06:23 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s483ms. 2026-03-27 19:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2909 KB; ModuleMetadata: 1539 KB; ProcessInfo: 719 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 244 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 142 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7486 KB; 2026-03-27 19:08:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 19:08:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 19:08:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 19:08:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 19:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2889 KB; ModuleMetadata: 1539 KB; ProcessInfo: 743 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 258 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 168 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7522 KB; 2026-03-27 19:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2892 KB; ModuleMetadata: 1539 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 247 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7576 KB; 2026-03-27 19:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 19:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2890 KB; ModuleMetadata: 1539 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 253 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7588 KB; 2026-03-27 19:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2893 KB; ModuleMetadata: 1539 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 269 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7644 KB; 2026-03-27 19:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2879 KB; ModuleMetadata: 1539 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 255 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7667 KB; 2026-03-27 19:13:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 19:13:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 19:13:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 19:13:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 19:13:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 19:06:18, To:, 2026-03-27 19:13:22, Duration (s):, 424, Events Per Second:, 0.850, Events:, 361, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 360, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 45200 2026-03-27 19:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2881 KB; ModuleMetadata: 1539 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 255 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; BatchStringTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 7605 KB; 2026-03-27 19:13:23 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s779ms. 2026-03-27 19:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2882 KB; ModuleMetadata: 1540 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 250 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7543 KB; 2026-03-27 19:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 19:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2883 KB; ModuleMetadata: 1540 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 255 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7528 KB; 2026-03-27 19:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2903 KB; ModuleMetadata: 1540 KB; ProcessInfo: 774 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 261 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 142 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7558 KB; 2026-03-27 19:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2905 KB; ModuleMetadata: 1540 KB; ProcessInfo: 778 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; rules::ProcessConditionsCache: 257 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 140 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7557 KB; 2026-03-27 19:18:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 19:18:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 19:18:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 19:18:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 19:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2889 KB; ModuleMetadata: 1542 KB; ProcessInfo: 1095 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 471 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 278 KB; CacheEntry: 222 KB; rules::ProcessConditionsCache: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; BaseEvent: 160 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8144 KB; 2026-03-27 19:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2890 KB; ModuleMetadata: 1543 KB; ProcessInfo: 1241 KB; rules::RuleEvaluationCtx: 887 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 361 KB; TcpIpConnectionsManager: 335 KB; ModuleInfoCache: 301 KB; BaseEvent: 229 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 107 KB; BatchSerializer::EventsQueueTag: 61 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9008 KB; 2026-03-27 19:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 19:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:20:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 19:13:28, To:, 2026-03-27 19:20:22, Duration (s):, 414, Events Per Second:, 3.148, Events:, 1305, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1080, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 216, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 148174 2026-03-27 19:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2892 KB; ModuleMetadata: 1543 KB; ProcessInfo: 1175 KB; rules::RuleEvaluationCtx: 887 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 374 KB; TcpIpConnectionsManager: 332 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; BatchStringTag: 144 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 8814 KB; 2026-03-27 19:20:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s559ms. 2026-03-27 19:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2892 KB; ModuleMetadata: 1543 KB; ProcessInfo: 1198 KB; rules::RuleEvaluationCtx: 887 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 222 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8238 KB; 2026-03-27 19:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2880 KB; ModuleMetadata: 1543 KB; ProcessInfo: 1244 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8354 KB; 2026-03-27 19:23:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 19:23:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 19:23:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 19:23:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 19:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2880 KB; ModuleMetadata: 1543 KB; ProcessInfo: 1244 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8307 KB; 2026-03-27 19:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2880 KB; ModuleMetadata: 1543 KB; ProcessInfo: 1313 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 255 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 113 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8521 KB; 2026-03-27 19:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 19:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2883 KB; ModuleMetadata: 1543 KB; ProcessInfo: 1317 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 230 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 38 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8442 KB; 2026-03-27 19:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2904 KB; ModuleMetadata: 1543 KB; ProcessInfo: 1324 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 41 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8458 KB; 2026-03-27 19:27:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 19:20:55, To:, 2026-03-27 19:27:22, Duration (s):, 387, Events Per Second:, 1.158, Events:, 449, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 445, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 54956 2026-03-27 19:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2905 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 83 KB; BatchStringTag: 53 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 7957 KB; 2026-03-27 19:27:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s134ms. 2026-03-27 19:28:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 19:28:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 19:28:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 19:28:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 19:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7792 KB; 2026-03-27 19:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2889 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7908 KB; 2026-03-27 19:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 19:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2890 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 229 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8030 KB; 2026-03-27 19:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2892 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; TcpIpConnectionsManager: 222 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7985 KB; 2026-03-27 19:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2880 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 887 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8026 KB; 2026-03-27 19:33:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 19:33:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 19:33:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 19:33:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 19:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2880 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 887 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 181 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7964 KB; 2026-03-27 19:34:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 19:27:22, To:, 2026-03-27 19:34:22, Duration (s):, 420, Events Per Second:, 0.720, Events:, 303, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 302, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39530 2026-03-27 19:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2882 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 47 KB; BatchStringTag: 38 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; Total: 7932 KB; 2026-03-27 19:34:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s279ms. 2026-03-27 19:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 19:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2883 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 729 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 147 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7737 KB; 2026-03-27 19:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2885 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 731 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7731 KB; 2026-03-27 19:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 731 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7733 KB; 2026-03-27 19:38:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 19:38:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 19:38:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 19:38:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 19:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2889 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 731 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7737 KB; 2026-03-27 19:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2909 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 774 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7827 KB; 2026-03-27 19:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 19:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2911 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7848 KB; 2026-03-27 19:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2891 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7912 KB; 2026-03-27 19:41:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 19:35:00, To:, 2026-03-27 19:41:22, Duration (s):, 382, Events Per Second:, 0.554, Events:, 212, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 211, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28768 2026-03-27 19:41:23 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s647ms. 2026-03-27 19:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2878 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 122 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7967 KB; 2026-03-27 19:43:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 19:43:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 19:43:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 19:43:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 19:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2879 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7911 KB; 2026-03-27 19:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2881 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7897 KB; 2026-03-27 19:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 19:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2882 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7884 KB; 2026-03-27 19:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2883 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 160 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7914 KB; 2026-03-27 19:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2885 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 171 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7938 KB; 2026-03-27 19:48:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 19:48:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 19:48:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 19:48:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 19:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2887 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 183 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7988 KB; 2026-03-27 19:48:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 19:41:18, To:, 2026-03-27 19:48:22, Duration (s):, 424, Events Per Second:, 0.560, Events:, 238, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 237, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31338 2026-03-27 19:48:23 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s684ms. 2026-03-27 19:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2888 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 753 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 160 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7782 KB; 2026-03-27 19:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 19:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2890 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 171 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7846 KB; 2026-03-27 19:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2892 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 178 KB; rules::ProcessConditionsCache: 109 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7905 KB; 2026-03-27 19:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2878 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7877 KB; 2026-03-27 19:53:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 19:53:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 19:53:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 19:53:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 19:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2879 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 160 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7858 KB; 2026-03-27 19:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2882 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7880 KB; 2026-03-27 19:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 19:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2885 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7868 KB; 2026-03-27 19:55:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 19:48:22, To:, 2026-03-27 19:55:22, Duration (s):, 420, Events Per Second:, 0.383, Events:, 161, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 160, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22252 2026-03-27 19:55:23 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s628ms. 2026-03-27 19:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 716 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; TcpIpConnectionsManager: 140 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 83 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7759 KB; 2026-03-27 19:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2887 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 716 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7757 KB; 2026-03-27 19:58:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 19:58:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 19:58:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 19:58:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 19:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2889 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 719 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7759 KB; 2026-03-27 19:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2890 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 768 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; TcpIpConnectionsManager: 189 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7941 KB; 2026-03-27 19:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 19:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 19:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2890 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; rules::ProcessConditionsCache: 138 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7990 KB; 2026-03-27 20:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2890 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 94 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7942 KB; 2026-03-27 20:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2877 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; TcpIpConnectionsManager: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7969 KB; 2026-03-27 20:02:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 19:55:23, To:, 2026-03-27 20:02:22, Duration (s):, 419, Events Per Second:, 0.686, Events:, 288, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 287, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37021 2026-03-27 20:02:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s775ms. 2026-03-27 20:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2881 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 181 KB; cloudutils::CloudData: 105 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7898 KB; 2026-03-27 20:03:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 20:03:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 20:03:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 20:03:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 20:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2881 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 105 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7878 KB; 2026-03-27 20:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 20:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2881 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 105 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7862 KB; 2026-03-27 20:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2881 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 105 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7857 KB; 2026-03-27 20:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2881 KB; ModuleMetadata: 1543 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 301 KB; CacheEntry: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 105 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7858 KB; 2026-03-27 20:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2894 KB; ModuleMetadata: 1543 KB; ProcessInfo: 1320 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 383 KB; ModuleInfoCache: 302 KB; BaseEvent: 257 KB; rules::ProcessConditionsCache: 253 KB; CacheEntry: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 105 KB; BatchSerializer::EventsQueueTag: 72 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9112 KB; 2026-03-27 20:08:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 20:08:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 20:08:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 20:08:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 20:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2896 KB; ModuleMetadata: 1543 KB; ProcessInfo: 1367 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 386 KB; ModuleInfoCache: 302 KB; BaseEvent: 266 KB; rules::ProcessConditionsCache: 266 KB; CacheEntry: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 105 KB; BatchSerializer::EventsQueueTag: 77 KB; ProcessInfoCommandLineTag: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9201 KB; 2026-03-27 20:09:22 7967594126c0 Info: Events Statistics, From:, 2026-03-27 20:02:22, To:, 2026-03-27 20:09:22, Duration (s):, 420, Events Per Second:, 3.866, Events:, 1627, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1347, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 32, Livegrid:, 32, OriginUrl:, 0, Alarms:, 215, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 184238 2026-03-27 20:09:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s108ms. 2026-03-27 20:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 20:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2898 KB; ModuleMetadata: 1545 KB; ProcessInfo: 1486 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 475 KB; ModuleInfoCache: 302 KB; CacheEntry: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 100 KB; BaseEvent: 79 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9010 KB; 2026-03-27 20:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2898 KB; ModuleMetadata: 1545 KB; ProcessInfo: 1512 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; TcpIpConnectionsManager: 247 KB; CacheEntry: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 107 KB; BaseEvent: 94 KB; rules::ProcessConditionsCache: 82 KB; ProcessInfoCommandLineTag: 57 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8793 KB; 2026-03-27 20:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2883 KB; ProcessInfo: 1546 KB; ModuleMetadata: 1545 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; TcpIpConnectionsManager: 283 KB; CacheEntry: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 146 KB; cloudutils::CloudData: 107 KB; BaseEvent: 99 KB; ProcessInfoCommandLineTag: 58 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8924 KB; 2026-03-27 20:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2904 KB; ProcessInfo: 1549 KB; ModuleMetadata: 1545 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 223 KB; TcpIpConnectionsManager: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 107 KB; BaseEvent: 104 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 57 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8821 KB; 2026-03-27 20:13:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 20:13:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 20:13:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 20:13:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 20:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2904 KB; ProcessInfo: 1571 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 110 KB; cloudutils::CloudData: 105 KB; rules::ProcessConditionsCache: 93 KB; ProcessInfoCommandLineTag: 57 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8845 KB; 2026-03-27 20:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 20:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2885 KB; ProcessInfo: 1596 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; TcpIpConnectionsManager: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; BaseEvent: 118 KB; cloudutils::CloudData: 105 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 57 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8866 KB; 2026-03-27 20:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2887 KB; ProcessInfo: 1596 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; TcpIpConnectionsManager: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; BaseEvent: 118 KB; cloudutils::CloudData: 105 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 57 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8849 KB; 2026-03-27 20:16:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 20:09:24, To:, 2026-03-27 20:16:23, Duration (s):, 419, Events Per Second:, 1.987, Events:, 833, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 738, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 86, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 96589 2026-03-27 20:16:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s795ms. 2026-03-27 20:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2891 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 165 KB; rules::ProcessConditionsCache: 133 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7996 KB; 2026-03-27 20:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2891 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 140 KB; rules::ProcessConditionsCache: 133 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7978 KB; 2026-03-27 20:18:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 20:18:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 20:18:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 20:18:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 20:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2894 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 142 KB; rules::ProcessConditionsCache: 135 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7990 KB; 2026-03-27 20:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 20:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2892 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; rules::ProcessConditionsCache: 144 KB; TcpIpConnectionsManager: 143 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 51 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8013 KB; 2026-03-27 20:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2896 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; rules::ProcessConditionsCache: 144 KB; TcpIpConnectionsManager: 137 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 51 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8016 KB; 2026-03-27 20:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2878 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; rules::ProcessConditionsCache: 144 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 51 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8000 KB; 2026-03-27 20:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2880 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 207 KB; rules::ProcessConditionsCache: 144 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 51 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8010 KB; 2026-03-27 20:23:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 20:16:52, To:, 2026-03-27 20:23:23, Duration (s):, 391, Events Per Second:, 0.685, Events:, 268, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 251, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 8, Livegrid:, 8, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33645 2026-03-27 20:23:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s425ms. 2026-03-27 20:23:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 20:23:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 20:23:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 20:23:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 20:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2882 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 715 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 207 KB; rules::ProcessConditionsCache: 145 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7823 KB; 2026-03-27 20:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 20:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2881 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 919 KB; ProcessInfo: 722 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; rules::ProcessConditionsCache: 147 KB; TcpIpConnectionsManager: 143 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7828 KB; 2026-03-27 20:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2884 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 725 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; rules::ProcessConditionsCache: 177 KB; TcpIpConnectionsManager: 143 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7868 KB; 2026-03-27 20:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2887 KB; ModuleMetadata: 1548 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 753 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 303 KB; rules::ProcessConditionsCache: 245 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 171 KB; cloudutils::CloudData: 104 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8022 KB; 2026-03-27 20:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1550 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 753 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 303 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 184 KB; TcpIpConnectionsManager: 168 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7935 KB; 2026-03-27 20:28:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 20:28:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 20:28:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 20:28:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 20:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2888 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 757 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 182 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7956 KB; 2026-03-27 20:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 20:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2891 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 247 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 196 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8127 KB; 2026-03-27 20:30:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 20:23:46, To:, 2026-03-27 20:30:23, Duration (s):, 397, Events Per Second:, 0.672, Events:, 267, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 190, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 37, Livegrid:, 37, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33880 2026-03-27 20:30:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s628ms. 2026-03-27 20:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2891 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8016 KB; 2026-03-27 20:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2878 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; TcpIpConnectionsManager: 229 KB; rules::ProcessConditionsCache: 228 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8131 KB; 2026-03-27 20:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2881 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; TcpIpConnectionsManager: 217 KB; rules::ProcessConditionsCache: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8086 KB; 2026-03-27 20:33:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 20:33:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 20:33:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 20:33:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 20:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2882 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 188 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8070 KB; 2026-03-27 20:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 20:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2884 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; rules::ProcessConditionsCache: 197 KB; TcpIpConnectionsManager: 150 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8052 KB; 2026-03-27 20:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2884 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8089 KB; 2026-03-27 20:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2905 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8112 KB; 2026-03-27 20:37:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 20:30:23, To:, 2026-03-27 20:37:23, Duration (s):, 420, Events Per Second:, 0.616, Events:, 259, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 254, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34562 2026-03-27 20:37:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s687ms. 2026-03-27 20:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2906 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 740 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; rules::ProcessConditionsCache: 196 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7949 KB; 2026-03-27 20:38:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 20:38:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 20:38:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 20:38:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 20:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2889 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 267 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 205 KB; TcpIpConnectionsManager: 188 KB; cloudutils::CloudData: 105 KB; BaseEvent: 77 KB; ProcessInfoCommandLineTag: 69 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8279 KB; 2026-03-27 20:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 20:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2891 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 210 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 105 KB; BaseEvent: 84 KB; ProcessInfoCommandLineTag: 69 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8244 KB; 2026-03-27 20:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2893 KB; ModuleMetadata: 1553 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 207 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 105 KB; BaseEvent: 86 KB; ProcessInfoCommandLineTag: 69 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8253 KB; 2026-03-27 20:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2920 KB; ModuleMetadata: 1553 KB; ProcessInfo: 922 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 227 KB; TcpIpConnectionsManager: 225 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 105 KB; BaseEvent: 98 KB; ProcessInfoCommandLineTag: 69 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8387 KB; 2026-03-27 20:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2900 KB; ModuleMetadata: 1553 KB; ProcessInfo: 923 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 105 KB; BaseEvent: 102 KB; ProcessInfoCommandLineTag: 69 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8317 KB; 2026-03-27 20:43:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 20:43:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 20:43:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 20:43:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 20:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2902 KB; ModuleMetadata: 1554 KB; ProcessInfo: 923 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 188 KB; cloudutils::CloudData: 105 KB; BaseEvent: 103 KB; ProcessInfoCommandLineTag: 69 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8321 KB; 2026-03-27 20:44:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 20:38:41, To:, 2026-03-27 20:44:23, Duration (s):, 342, Events Per Second:, 1.995, Events:, 683, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 496, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 93, Livegrid:, 93, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 78212 2026-03-27 20:44:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s810ms. 2026-03-27 20:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 20:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2904 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 326 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8200 KB; 2026-03-27 20:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2885 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 188 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8056 KB; 2026-03-27 20:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 186 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8054 KB; 2026-03-27 20:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 212 KB; TcpIpConnectionsManager: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8100 KB; 2026-03-27 20:48:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 20:48:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 20:48:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 20:48:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 20:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 168 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8059 KB; 2026-03-27 20:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 20:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2907 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 262 KB; CacheEntry: 224 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8207 KB; 2026-03-27 20:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2907 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 173 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8139 KB; 2026-03-27 20:51:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 20:44:52, To:, 2026-03-27 20:51:23, Duration (s):, 391, Events Per Second:, 0.766, Events:, 300, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 299, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37241 2026-03-27 20:51:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s676ms. 2026-03-27 20:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2894 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 163 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7948 KB; 2026-03-27 20:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2896 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 318 KB; ModuleInfoCache: 304 KB; TcpIpConnectionsManager: 235 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8235 KB; 2026-03-27 20:53:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 20:53:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 20:53:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 20:53:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 20:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2877 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 269 KB; TcpIpConnectionsManager: 237 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8194 KB; 2026-03-27 20:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 20:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2878 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; TcpIpConnectionsManager: 235 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 214 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8139 KB; 2026-03-27 20:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2880 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 869 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; TcpIpConnectionsManager: 225 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8158 KB; 2026-03-27 20:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2884 KB; ModuleMetadata: 1554 KB; ProcessInfo: 945 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 287 KB; CacheEntry: 224 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 107 KB; BaseEvent: 81 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8376 KB; 2026-03-27 20:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2884 KB; ModuleMetadata: 1554 KB; ProcessInfo: 1016 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 337 KB; ModuleInfoCache: 304 KB; TcpIpConnectionsManager: 237 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; BaseEvent: 112 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8555 KB; 2026-03-27 20:58:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 20:52:02, To:, 2026-03-27 20:58:23, Duration (s):, 381, Events Per Second:, 2.016, Events:, 769, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 661, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 25, Livegrid:, 25, OriginUrl:, 0, Alarms:, 57, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 87790 2026-03-27 20:58:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s554ms. 2026-03-27 20:58:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 20:58:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 20:58:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 20:58:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 20:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2887 KB; ModuleMetadata: 1554 KB; ProcessInfo: 948 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 409 KB; ModuleInfoCache: 304 KB; TcpIpConnectionsManager: 242 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8457 KB; 2026-03-27 20:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 20:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 20:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2890 KB; ModuleMetadata: 1554 KB; ProcessInfo: 988 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 105 KB; rules::ProcessConditionsCache: 56 KB; BaseEvent: 49 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8152 KB; 2026-03-27 21:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2895 KB; ModuleMetadata: 1554 KB; ProcessInfo: 1142 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; TcpIpConnectionsManager: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 105 KB; BaseEvent: 104 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8500 KB; 2026-03-27 21:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2882 KB; ModuleMetadata: 1554 KB; ProcessInfo: 1144 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 180 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 105 KB; BaseEvent: 105 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8463 KB; 2026-03-27 21:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2904 KB; ModuleMetadata: 1554 KB; ProcessInfo: 1150 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 184 KB; TcpIpConnectionsManager: 166 KB; BaseEvent: 120 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8507 KB; 2026-03-27 21:03:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 21:03:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 21:03:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 21:03:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 21:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2906 KB; ModuleMetadata: 1554 KB; ProcessInfo: 1150 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; rules::ProcessConditionsCache: 184 KB; TcpIpConnectionsManager: 137 KB; BaseEvent: 121 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8486 KB; 2026-03-27 21:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 21:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2886 KB; ModuleMetadata: 1554 KB; ProcessInfo: 1177 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 186 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; TcpIpConnectionsManager: 166 KB; BaseEvent: 128 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8519 KB; 2026-03-27 21:05:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 20:58:22, To:, 2026-03-27 21:05:23, Duration (s):, 421, Events Per Second:, 1.997, Events:, 842, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 708, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 27, Livegrid:, 27, OriginUrl:, 0, Alarms:, 79, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 98198 2026-03-27 21:05:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s113ms. 2026-03-27 21:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2888 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 171 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7931 KB; 2026-03-27 21:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2889 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 171 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7935 KB; 2026-03-27 21:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2891 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 142 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7912 KB; 2026-03-27 21:08:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 21:08:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 21:08:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 21:08:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 21:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2912 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8002 KB; 2026-03-27 21:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 21:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2913 KB; ModuleMetadata: 1554 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; rules::ProcessConditionsCache: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8026 KB; 2026-03-27 21:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2917 KB; ModuleMetadata: 1554 KB; ProcessInfo: 956 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 357 KB; ModuleInfoCache: 304 KB; CacheEntry: 224 KB; TcpIpConnectionsManager: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 105 KB; BaseEvent: 83 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8493 KB; 2026-03-27 21:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2900 KB; ModuleMetadata: 1556 KB; ProcessInfo: 1123 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; TcpIpConnectionsManager: 296 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; BaseEvent: 158 KB; rules::ProcessConditionsCache: 142 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8617 KB; 2026-03-27 21:12:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 21:05:43, To:, 2026-03-27 21:12:23, Duration (s):, 400, Events Per Second:, 2.540, Events:, 1018, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 877, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 134, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 117640 2026-03-27 21:12:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s928ms. 2026-03-27 21:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2882 KB; ModuleMetadata: 1556 KB; ProcessInfo: 1111 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 329 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8485 KB; 2026-03-27 21:13:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 21:13:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 21:13:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 21:13:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 21:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2883 KB; ModuleMetadata: 1556 KB; ProcessInfo: 1157 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 317 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8566 KB; 2026-03-27 21:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 21:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2885 KB; ModuleMetadata: 1556 KB; ProcessInfo: 1161 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; TcpIpConnectionsManager: 242 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8460 KB; 2026-03-27 21:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2928 KB; ModuleMetadata: 1556 KB; ProcessInfo: 1183 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 219 KB; rules::ProcessConditionsCache: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 107 KB; BaseEvent: 48 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8555 KB; 2026-03-27 21:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2853 KB; ModuleMetadata: 1556 KB; ProcessInfo: 1210 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 213 KB; TcpIpConnectionsManager: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 107 KB; BaseEvent: 59 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8506 KB; 2026-03-27 21:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2854 KB; ModuleMetadata: 1556 KB; ProcessInfo: 1210 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 186 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 184 KB; cloudutils::CloudData: 107 KB; BaseEvent: 62 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8457 KB; 2026-03-27 21:18:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 21:18:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 21:18:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 21:18:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 21:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2875 KB; ModuleMetadata: 1556 KB; ProcessInfo: 1210 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 180 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 107 KB; BaseEvent: 62 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8471 KB; 2026-03-27 21:19:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 21:12:23, To:, 2026-03-27 21:19:23, Duration (s):, 420, Events Per Second:, 1.131, Events:, 476, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 449, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57419 2026-03-27 21:19:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s857ms. 2026-03-27 21:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 21:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2873 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 147 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7913 KB; 2026-03-27 21:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2875 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; rules::ProcessConditionsCache: 191 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7909 KB; 2026-03-27 21:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2863 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; rules::ProcessConditionsCache: 191 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7895 KB; 2026-03-27 21:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2865 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7965 KB; 2026-03-27 21:23:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 21:23:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 21:23:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 21:23:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 21:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2844 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8006 KB; 2026-03-27 21:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 21:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2847 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 199 KB; rules::ProcessConditionsCache: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8025 KB; 2026-03-27 21:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2850 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 224 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8139 KB; 2026-03-27 21:26:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 21:20:04, To:, 2026-03-27 21:26:23, Duration (s):, 379, Events Per Second:, 0.721, Events:, 274, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 273, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35196 2026-03-27 21:26:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s387ms. 2026-03-27 21:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2815 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 202 KB; TcpIpConnectionsManager: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7943 KB; 2026-03-27 21:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2817 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7945 KB; 2026-03-27 21:28:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 21:28:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 21:28:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 21:28:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 21:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2818 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 160 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7951 KB; 2026-03-27 21:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 21:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2821 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 255 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 186 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8083 KB; 2026-03-27 21:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2820 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 246 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8126 KB; 2026-03-27 21:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2807 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 900 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 246 KB; TcpIpConnectionsManager: 239 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8172 KB; 2026-03-27 21:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2809 KB; ModuleMetadata: 1556 KB; ProcessInfo: 925 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; TcpIpConnectionsManager: 242 KB; rules::ProcessConditionsCache: 240 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8206 KB; 2026-03-27 21:33:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 21:26:23, To:, 2026-03-27 21:33:23, Duration (s):, 420, Events Per Second:, 0.855, Events:, 360, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 359, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 45874 2026-03-27 21:33:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s668ms. 2026-03-27 21:33:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 21:33:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 21:33:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 21:33:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 21:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2810 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 211 KB; rules::ProcessConditionsCache: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7975 KB; 2026-03-27 21:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 21:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2812 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7954 KB; 2026-03-27 21:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2814 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 150 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7933 KB; 2026-03-27 21:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2814 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 137 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7924 KB; 2026-03-27 21:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2815 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7922 KB; 2026-03-27 21:38:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 21:38:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 21:38:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 21:38:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 21:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2818 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 214 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8001 KB; 2026-03-27 21:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 21:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2821 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; TcpIpConnectionsManager: 137 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8030 KB; 2026-03-27 21:40:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 21:33:23, To:, 2026-03-27 21:40:23, Duration (s):, 420, Events Per Second:, 0.382, Events:, 161, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 160, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22482 2026-03-27 21:40:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s453ms. 2026-03-27 21:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2808 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 277 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8008 KB; 2026-03-27 21:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2796 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 227 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 168 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7937 KB; 2026-03-27 21:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2795 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 168 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7933 KB; 2026-03-27 21:43:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 21:43:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 21:43:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 21:43:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 21:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2797 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; rules::ProcessConditionsCache: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 158 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7932 KB; 2026-03-27 21:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 21:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2798 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 240 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 143 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7953 KB; 2026-03-27 21:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2820 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 262 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8101 KB; 2026-03-27 21:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2801 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 227 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8047 KB; 2026-03-27 21:47:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 21:40:35, To:, 2026-03-27 21:47:23, Duration (s):, 408, Events Per Second:, 0.567, Events:, 232, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 231, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29430 2026-03-27 21:47:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s301ms. 2026-03-27 21:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2802 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 255 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7983 KB; 2026-03-27 21:48:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 21:48:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 21:48:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 21:48:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 21:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2803 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 240 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7994 KB; 2026-03-27 21:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 21:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2806 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 231 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7985 KB; 2026-03-27 21:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2779 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 248 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 186 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7999 KB; 2026-03-27 21:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2747 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 262 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8042 KB; 2026-03-27 21:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2747 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 235 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8020 KB; 2026-03-27 21:53:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 21:53:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 21:53:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 21:53:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 21:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2768 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 231 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8031 KB; 2026-03-27 21:54:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 21:47:54, To:, 2026-03-27 21:54:23, Duration (s):, 389, Events Per Second:, 0.674, Events:, 263, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 262, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32784 2026-03-27 21:54:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s671ms. 2026-03-27 21:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 21:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2748 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 235 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 176 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7891 KB; 2026-03-27 21:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2752 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 341 KB; ModuleInfoCache: 304 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 214 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8110 KB; 2026-03-27 21:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2754 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 251 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 214 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8021 KB; 2026-03-27 21:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2753 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 237 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8013 KB; 2026-03-27 21:58:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 21:58:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 21:58:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 21:58:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 21:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2755 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 240 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 201 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8028 KB; 2026-03-27 21:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 21:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 21:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2757 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 253 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 158 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8027 KB; 2026-03-27 22:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2757 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 253 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8025 KB; 2026-03-27 22:01:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 21:54:31, To:, 2026-03-27 22:01:23, Duration (s):, 412, Events Per Second:, 0.724, Events:, 299, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 291, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38008 2026-03-27 22:01:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s468ms. 2026-03-27 22:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 252 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7871 KB; 2026-03-27 22:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2747 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 762 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 252 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 173 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7882 KB; 2026-03-27 22:03:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 22:03:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 22:03:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 22:03:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 22:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 765 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 252 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 168 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7857 KB; 2026-03-27 22:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 22:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 267 KB; CacheEntry: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7917 KB; 2026-03-27 22:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1556 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 289 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8008 KB; 2026-03-27 22:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1557 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 260 KB; CacheEntry: 225 KB; TcpIpConnectionsManager: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8036 KB; 2026-03-27 22:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 1568 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 256 KB; CacheEntry: 226 KB; TcpIpConnectionsManager: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8061 KB; 2026-03-27 22:08:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 22:01:21, To:, 2026-03-27 22:08:23, Duration (s):, 422, Events Per Second:, 0.889, Events:, 376, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 337, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 19, Livegrid:, 19, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44292 2026-03-27 22:08:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s746ms. 2026-03-27 22:08:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 22:08:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 22:08:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 22:08:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 22:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 257 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 188 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7981 KB; 2026-03-27 22:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 22:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 257 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 153 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7953 KB; 2026-03-27 22:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2752 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 264 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 137 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7979 KB; 2026-03-27 22:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2739 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 264 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7968 KB; 2026-03-27 22:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2762 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 266 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8003 KB; 2026-03-27 22:13:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 22:13:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 22:13:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 22:13:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 22:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 268 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7992 KB; 2026-03-27 22:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 22:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 303 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; TcpIpConnectionsManager: 165 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8062 KB; 2026-03-27 22:15:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 22:08:26, To:, 2026-03-27 22:15:23, Duration (s):, 417, Events Per Second:, 0.502, Events:, 210, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 195, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 7, Livegrid:, 7, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28359 2026-03-27 22:15:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s435ms. 2026-03-27 22:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 743 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 272 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7873 KB; 2026-03-27 22:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 747 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 267 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7881 KB; 2026-03-27 22:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 267 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7920 KB; 2026-03-27 22:18:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 22:18:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 22:18:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 22:18:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 22:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 267 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 165 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7908 KB; 2026-03-27 22:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 22:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 274 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7928 KB; 2026-03-27 22:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 272 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 142 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7910 KB; 2026-03-27 22:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 274 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 145 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7911 KB; 2026-03-27 22:22:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 22:15:23, To:, 2026-03-27 22:22:23, Duration (s):, 420, Events Per Second:, 0.321, Events:, 135, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 134, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19838 2026-03-27 22:22:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s312ms. 2026-03-27 22:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 728 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 276 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 147 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7839 KB; 2026-03-27 22:23:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 22:23:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 22:23:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 22:23:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 22:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 731 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 274 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 142 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7832 KB; 2026-03-27 22:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 22:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 732 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 276 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 140 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7840 KB; 2026-03-27 22:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 734 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 276 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7844 KB; 2026-03-27 22:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 768 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 329 KB; ModuleInfoCache: 306 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 173 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7977 KB; 2026-03-27 22:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1575 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 768 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 276 KB; CacheEntry: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 173 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7916 KB; 2026-03-27 22:28:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 22:28:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 22:28:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 22:28:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 22:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 294 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7988 KB; 2026-03-27 22:29:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 22:22:49, To:, 2026-03-27 22:29:23, Duration (s):, 394, Events Per Second:, 0.430, Events:, 170, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 169, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23030 2026-03-27 22:29:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s557ms. 2026-03-27 22:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 22:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 283 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7947 KB; 2026-03-27 22:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 340 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8116 KB; 2026-03-27 22:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 292 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8034 KB; 2026-03-27 22:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 340 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8121 KB; 2026-03-27 22:33:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 22:33:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 22:33:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 22:33:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 22:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 294 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 181 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8061 KB; 2026-03-27 22:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 22:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 297 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8073 KB; 2026-03-27 22:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 297 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8076 KB; 2026-03-27 22:36:23 7967594126c0 Info: Events Statistics, From:, 2026-03-27 22:29:23, To:, 2026-03-27 22:36:23, Duration (s):, 420, Events Per Second:, 0.687, Events:, 289, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 288, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36250 2026-03-27 22:36:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s054ms. 2026-03-27 22:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 350 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8021 KB; 2026-03-27 22:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 352 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8107 KB; 2026-03-27 22:38:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 22:38:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 22:38:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 22:38:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 22:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 304 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 206 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8109 KB; 2026-03-27 22:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 22:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 341 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 219 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8198 KB; 2026-03-27 22:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 330 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 188 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8178 KB; 2026-03-27 22:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1578 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 917 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 310 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8176 KB; 2026-03-27 22:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1578 KB; ProcessInfo: 925 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 317 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8194 KB; 2026-03-27 22:43:24 7967594126c0 Info: Events Statistics, From:, 2026-03-27 22:36:32, To:, 2026-03-27 22:43:23, Duration (s):, 411, Events Per Second:, 1.121, Events:, 462, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 461, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56660 2026-03-27 22:43:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s841ms. 2026-03-27 22:43:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 22:43:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 22:43:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 22:43:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 22:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 762 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 310 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 178 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7946 KB; 2026-03-27 22:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 22:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 334 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 165 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7991 KB; 2026-03-27 22:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 334 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 186 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8044 KB; 2026-03-27 22:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 359 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8111 KB; 2026-03-27 22:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 345 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 209 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8121 KB; 2026-03-27 22:48:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 22:48:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 22:48:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 22:48:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 22:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 337 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8103 KB; 2026-03-27 22:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 22:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 339 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 168 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8109 KB; 2026-03-27 22:50:24 7967594126c0 Info: Events Statistics, From:, 2026-03-27 22:43:22, To:, 2026-03-27 22:50:24, Duration (s):, 422, Events Per Second:, 0.552, Events:, 233, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 232, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30556 2026-03-27 22:50:24 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s676ms. 2026-03-27 22:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 746 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 318 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; TcpIpConnectionsManager: 150 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7922 KB; 2026-03-27 22:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 746 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 316 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 145 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7902 KB; 2026-03-27 22:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 371 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8024 KB; 2026-03-27 22:53:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 22:53:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 22:53:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 22:53:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 22:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 920 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 318 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 173 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7984 KB; 2026-03-27 22:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 22:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 1582 KB; ProcessInfo: 997 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; TcpIpConnectionsManager: 262 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 157 KB; BaseEvent: 112 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8267 KB; 2026-03-27 22:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 1582 KB; ProcessInfo: 1191 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 366 KB; TcpIpConnectionsManager: 329 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; BaseEvent: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 109 KB; BatchSerializer::EventsQueueTag: 56 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8860 KB; 2026-03-27 22:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 1582 KB; ProcessInfo: 1333 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 386 KB; ModuleInfoCache: 307 KB; BaseEvent: 267 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 131 KB; cloudutils::CloudData: 109 KB; BatchSerializer::EventsQueueTag: 74 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8900 KB; 2026-03-27 22:57:24 7967594126c0 Info: Events Statistics, From:, 2026-03-27 22:50:57, To:, 2026-03-27 22:57:24, Duration (s):, 387, Events Per Second:, 4.107, Events:, 1590, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1342, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 247, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 181120 2026-03-27 22:57:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s878ms. 2026-03-27 22:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1582 KB; ProcessInfo: 1269 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; TcpIpConnectionsManager: 298 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; cloudutils::CloudData: 109 KB; rules::ProcessConditionsCache: 101 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8350 KB; 2026-03-27 22:58:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 22:58:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 22:58:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 22:58:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 22:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1582 KB; ProcessInfo: 1269 KB; rules::RuleEvaluationCtx: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 109 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8269 KB; 2026-03-27 22:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 22:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 22:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 1582 KB; ProcessInfo: 1304 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8332 KB; 2026-03-27 23:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 1582 KB; ProcessInfo: 1329 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 170 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8374 KB; 2026-03-27 23:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 1582 KB; ProcessInfo: 1329 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 168 KB; rules::ProcessConditionsCache: 142 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8358 KB; 2026-03-27 23:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1582 KB; ProcessInfo: 1351 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; rules::ProcessConditionsCache: 193 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8460 KB; 2026-03-27 23:03:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 23:03:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 23:03:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 23:03:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 23:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1582 KB; ProcessInfo: 1357 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 165 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8403 KB; 2026-03-27 23:04:24 7967594126c0 Info: Events Statistics, From:, 2026-03-27 22:57:24, To:, 2026-03-27 23:04:24, Duration (s):, 420, Events Per Second:, 0.604, Events:, 254, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 241, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33604 2026-03-27 23:04:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s684ms. 2026-03-27 23:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 23:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 765 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 156 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7800 KB; 2026-03-27 23:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 184 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 147 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7789 KB; 2026-03-27 23:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 173 KB; rules::ProcessConditionsCache: 149 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7794 KB; 2026-03-27 23:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 778 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 152 KB; rules::ProcessConditionsCache: 147 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7779 KB; 2026-03-27 23:08:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 23:08:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 23:08:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 23:08:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 23:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 868 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 273 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 205 KB; TcpIpConnectionsManager: 191 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8080 KB; 2026-03-27 23:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 23:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 186 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7993 KB; 2026-03-27 23:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 186 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7975 KB; 2026-03-27 23:11:24 7967594126c0 Info: Events Statistics, From:, 2026-03-27 23:04:46, To:, 2026-03-27 23:11:24, Duration (s):, 398, Events Per Second:, 0.946, Events:, 377, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 368, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47353 2026-03-27 23:11:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s781ms. 2026-03-27 23:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 272 KB; TcpIpConnectionsManager: 262 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8126 KB; 2026-03-27 23:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 219 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 171 KB; cloudutils::CloudData: 108 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7982 KB; 2026-03-27 23:13:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 23:13:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 23:13:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 23:13:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 23:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 912 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 307 KB; TcpIpConnectionsManager: 251 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 184 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8071 KB; 2026-03-27 23:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 23:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8028 KB; 2026-03-27 23:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1582 KB; ProcessInfo: 925 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8018 KB; 2026-03-27 23:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1582 KB; ProcessInfo: 928 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 171 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7993 KB; 2026-03-27 23:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1582 KB; ProcessInfo: 928 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 171 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7992 KB; 2026-03-27 23:18:24 7967594126c0 Info: Events Statistics, From:, 2026-03-27 23:11:24, To:, 2026-03-27 23:18:24, Duration (s):, 420, Events Per Second:, 0.766, Events:, 322, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 319, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39393 2026-03-27 23:18:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s729ms. 2026-03-27 23:18:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 23:18:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 23:18:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 23:18:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 23:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 724 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 171 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7714 KB; 2026-03-27 23:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 23:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 740 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; rules::ProcessConditionsCache: 176 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7744 KB; 2026-03-27 23:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 741 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 178 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7756 KB; 2026-03-27 23:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 754 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 211 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7814 KB; 2026-03-27 23:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 180 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7804 KB; 2026-03-27 23:23:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 23:23:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 23:23:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 23:23:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 23:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 176 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7803 KB; 2026-03-27 23:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 23:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 774 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 178 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7811 KB; 2026-03-27 23:25:24 7967594126c0 Info: Events Statistics, From:, 2026-03-27 23:19:36, To:, 2026-03-27 23:25:24, Duration (s):, 348, Events Per Second:, 0.384, Events:, 134, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 133, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18487 2026-03-27 23:25:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s183ms. 2026-03-27 23:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 743 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 178 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7733 KB; 2026-03-27 23:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 747 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 185 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7755 KB; 2026-03-27 23:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 183 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7797 KB; 2026-03-27 23:28:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 23:28:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 23:28:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 23:28:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 23:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 209 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7882 KB; 2026-03-27 23:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 23:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7940 KB; 2026-03-27 23:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 189 KB; TcpIpConnectionsManager: 187 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7907 KB; 2026-03-27 23:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 218 KB; TcpIpConnectionsManager: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7967 KB; 2026-03-27 23:32:24 7967594126c0 Info: Events Statistics, From:, 2026-03-27 23:25:45, To:, 2026-03-27 23:32:24, Duration (s):, 399, Events Per Second:, 0.668, Events:, 267, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 266, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34451 2026-03-27 23:32:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s699ms. 2026-03-27 23:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7810 KB; 2026-03-27 23:33:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 23:33:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 23:33:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 23:33:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 23:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 190 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7805 KB; 2026-03-27 23:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 23:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7801 KB; 2026-03-27 23:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7795 KB; 2026-03-27 23:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 133 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7794 KB; 2026-03-27 23:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 133 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7797 KB; 2026-03-27 23:38:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 23:38:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 23:38:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 23:38:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 23:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 133 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7871 KB; 2026-03-27 23:39:24 7967594126c0 Info: Events Statistics, From:, 2026-03-27 23:32:24, To:, 2026-03-27 23:39:24, Duration (s):, 420, Events Per Second:, 0.342, Events:, 144, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 143, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19816 2026-03-27 23:39:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s628ms. 2026-03-27 23:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 23:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 202 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7817 KB; 2026-03-27 23:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 266 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7942 KB; 2026-03-27 23:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 211 KB; TcpIpConnectionsManager: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7921 KB; 2026-03-27 23:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1582 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7905 KB; 2026-03-27 23:43:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 23:43:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 23:43:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 23:43:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 23:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1584 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; TcpIpConnectionsManager: 210 KB; rules::ProcessConditionsCache: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7962 KB; 2026-03-27 23:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 23:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1584 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7925 KB; 2026-03-27 23:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1584 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7927 KB; 2026-03-27 23:46:24 7967594126c0 Info: Events Statistics, From:, 2026-03-27 23:39:27, To:, 2026-03-27 23:46:24, Duration (s):, 417, Events Per Second:, 0.572, Events:, 239, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 238, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30504 2026-03-27 23:46:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s164ms. 2026-03-27 23:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1584 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 737 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7757 KB; 2026-03-27 23:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 1584 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 737 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7759 KB; 2026-03-27 23:48:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 23:48:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 23:48:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 23:48:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 23:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1584 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 740 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7768 KB; 2026-03-27 23:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 23:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 1584 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 756 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7815 KB; 2026-03-27 23:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1584 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7862 KB; 2026-03-27 23:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1584 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; rules::ProcessConditionsCache: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7852 KB; 2026-03-27 23:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1584 KB; rules::RuleEvaluationCtx: 924 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 244 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7953 KB; 2026-03-27 23:53:24 7967594126c0 Info: Events Statistics, From:, 2026-03-27 23:46:32, To:, 2026-03-27 23:53:24, Duration (s):, 412, Events Per Second:, 0.506, Events:, 209, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 196, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27482 2026-03-27 23:53:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s826ms. 2026-03-27 23:53:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 23:53:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 23:53:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 23:53:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 23:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1584 KB; ProcessInfo: 988 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; TcpIpConnectionsManager: 246 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 107 KB; cloudutils::CloudData: 107 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8136 KB; 2026-03-27 23:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 23:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1584 KB; ProcessInfo: 1063 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; TcpIpConnectionsManager: 275 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 161 KB; BaseEvent: 142 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8376 KB; 2026-03-27 23:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1584 KB; ProcessInfo: 1064 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; TcpIpConnectionsManager: 266 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 161 KB; BaseEvent: 143 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8373 KB; 2026-03-27 23:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1584 KB; ProcessInfo: 1064 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 161 KB; BaseEvent: 144 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8272 KB; 2026-03-27 23:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 1584 KB; ProcessInfo: 1066 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 307 KB; CacheEntry: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 161 KB; BaseEvent: 144 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 107 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8250 KB; 2026-03-27 23:58:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-27 23:58:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-27 23:58:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-27 23:58:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-27 23:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2750 KB; ModuleMetadata: 1612 KB; ProcessInfo: 1092 KB; rules::RuleEvaluationCtx: 924 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; rules::ProcessConditionsCache: 189 KB; BaseEvent: 157 KB; TcpIpConnectionsManager: 144 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8395 KB; 2026-03-27 23:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-27 23:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-27 23:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)