| Server IP : 104.21.84.107 / Your IP : 104.23.243.197 Web Server : Apache/2.4.63 (Ubuntu) System : Linux adminpruebas-Virtual-Machine 6.14.0-37-generic #37-Ubuntu SMP PREEMPT_DYNAMIC Fri Nov 14 22:10:32 UTC 2025 x86_64 User : www-data ( 33) PHP Version : 8.4.5 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /var/log/eset/eei/ |
Upload File : |
Version: 2.8.5555 (Oct 13 2025 18:38:28) Compiled with: Clang Version: 18.1.3 Npm: 10.8.2 HardwareInfo: CPU: IntelXeon, cores: 240, RAM: 7GB TelemetryId: Server d38ecbca8f660598256b227c9815089ffeddc553 2026-03-28 00:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2755 KB; ModuleMetadata: 1612 KB; ProcessInfo: 1117 KB; rules::RuleEvaluationCtx: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; rules::ProcessConditionsCache: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; BaseEvent: 165 KB; TcpIpConnectionsManager: 144 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 51 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8473 KB; 2026-03-28 00:00:24 7967594126c0 Info: Events Statistics, From:, 2026-03-27 23:53:23, To:, 2026-03-28 00:00:24, Duration (s):, 421, Events Per Second:, 2.227, Events:, 939, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 779, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 151, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 109192 2026-03-28 00:00:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s660ms. 2026-03-28 00:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 258 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8059 KB; 2026-03-28 00:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 263 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8043 KB; 2026-03-28 00:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 261 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8044 KB; 2026-03-28 00:03:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 00:03:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 00:03:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 00:03:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 00:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 263 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8045 KB; 2026-03-28 00:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 00:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 278 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8083 KB; 2026-03-28 00:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1612 KB; ProcessInfo: 926 KB; rules::RuleEvaluationCtx: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 294 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 179 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 111 KB; BaseEvent: 75 KB; ProcessInfoCommandLineTag: 60 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8225 KB; 2026-03-28 00:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1612 KB; ProcessInfo: 926 KB; rules::RuleEvaluationCtx: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 294 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 179 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 111 KB; BaseEvent: 75 KB; ProcessInfoCommandLineTag: 60 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8225 KB; 2026-03-28 00:07:24 7967594126c0 Info: Events Statistics, From:, 2026-03-28 00:00:30, To:, 2026-03-28 00:07:24, Duration (s):, 414, Events Per Second:, 1.415, Events:, 587, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 416, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 85, Livegrid:, 85, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67334 2026-03-28 00:07:25 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s835ms. 2026-03-28 00:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 296 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 179 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7958 KB; 2026-03-28 00:08:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 00:08:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 00:08:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 00:08:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 00:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 296 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 179 KB; TcpIpConnectionsManager: 129 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7936 KB; 2026-03-28 00:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 00:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 296 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 179 KB; TcpIpConnectionsManager: 129 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7936 KB; 2026-03-28 00:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 1612 KB; ProcessInfo: 1214 KB; rules::RuleEvaluationCtx: 926 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 311 KB; TcpIpConnectionsManager: 303 KB; rules::ProcessConditionsCache: 294 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; BaseEvent: 173 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 61 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8792 KB; 2026-03-28 00:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 1612 KB; ProcessInfo: 1214 KB; rules::RuleEvaluationCtx: 926 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 311 KB; TcpIpConnectionsManager: 303 KB; rules::ProcessConditionsCache: 294 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; BaseEvent: 174 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 61 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8781 KB; 2026-03-28 00:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 1612 KB; ProcessInfo: 1261 KB; rules::RuleEvaluationCtx: 926 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 377 KB; TcpIpConnectionsManager: 354 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; BaseEvent: 182 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 60 KB; BatchSerializer::EventsQueueTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8988 KB; 2026-03-28 00:13:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 00:13:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 00:13:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 00:13:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 00:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1612 KB; ProcessInfo: 1283 KB; rules::RuleEvaluationCtx: 926 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 362 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; TcpIpConnectionsManager: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; BaseEvent: 187 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 60 KB; BatchSerializer::EventsQueueTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8855 KB; 2026-03-28 00:14:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 00:05:45, To:, 2026-03-28 00:14:25, Duration (s):, 520, Events Per Second:, 2.517, Events:, 1309, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1158, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 150, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 152330 2026-03-28 00:14:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s799ms. 2026-03-28 00:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 00:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 300 KB; CacheEntry: 232 KB; TcpIpConnectionsManager: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8026 KB; 2026-03-28 00:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 302 KB; CacheEntry: 232 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8012 KB; 2026-03-28 00:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 304 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7997 KB; 2026-03-28 00:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 304 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 133 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7977 KB; 2026-03-28 00:18:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 00:18:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 00:18:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 00:18:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 00:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 304 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 133 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7979 KB; 2026-03-28 00:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 00:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 133 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7995 KB; 2026-03-28 00:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 133 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7999 KB; 2026-03-28 00:21:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 00:14:24, To:, 2026-03-28 00:21:25, Duration (s):, 421, Events Per Second:, 0.131, Events:, 55, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 54, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10719 2026-03-28 00:21:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s014ms. 2026-03-28 00:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 719 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 312 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 133 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7905 KB; 2026-03-28 00:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 722 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 312 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7915 KB; 2026-03-28 00:23:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 00:23:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 00:23:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 00:23:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 00:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 722 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 312 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7918 KB; 2026-03-28 00:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 00:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 725 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 312 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7939 KB; 2026-03-28 00:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 725 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 312 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7940 KB; 2026-03-28 00:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2740 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 341 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; TcpIpConnectionsManager: 144 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8025 KB; 2026-03-28 00:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 1612 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 341 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 205 KB; TcpIpConnectionsManager: 143 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8027 KB; 2026-03-28 00:28:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 00:22:25, To:, 2026-03-28 00:28:25, Duration (s):, 360, Events Per Second:, 0.233, Events:, 84, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 71, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12532 2026-03-28 00:28:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s539ms. 2026-03-28 00:28:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 00:28:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 00:28:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 00:28:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 00:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 1615 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 740 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 339 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 205 KB; TcpIpConnectionsManager: 143 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8001 KB; 2026-03-28 00:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 00:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 1615 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 744 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 345 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; TcpIpConnectionsManager: 133 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8008 KB; 2026-03-28 00:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 1615 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 744 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 345 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 133 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8012 KB; 2026-03-28 00:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 1615 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 746 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 345 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8001 KB; 2026-03-28 00:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 1615 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 349 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 8009 KB; 2026-03-28 00:33:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 00:33:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 00:33:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 00:33:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 00:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 1615 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 349 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8014 KB; 2026-03-28 00:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 00:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 1615 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 759 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 352 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8028 KB; 2026-03-28 00:35:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 00:28:28, To:, 2026-03-28 00:35:25, Duration (s):, 417, Events Per Second:, 0.129, Events:, 54, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 51, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9282 2026-03-28 00:35:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s802ms. 2026-03-28 00:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 1615 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 352 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8026 KB; 2026-03-28 00:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 1615 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 407 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8192 KB; 2026-03-28 00:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 1615 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 404 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8189 KB; 2026-03-28 00:38:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 00:38:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 00:38:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 00:38:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 00:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1615 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 110 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8226 KB; 2026-03-28 00:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 00:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 415 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 138 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8223 KB; 2026-03-28 00:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 415 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8228 KB; 2026-03-28 00:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 205 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 109 KB; rules::ProcessConditionsCache: 64 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7923 KB; 2026-03-28 00:42:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 00:35:38, To:, 2026-03-28 00:42:25, Duration (s):, 407, Events Per Second:, 0.965, Events:, 393, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 364, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49959 2026-03-28 00:42:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s827ms. 2026-03-28 00:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 744 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7664 KB; 2026-03-28 00:43:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 00:43:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 00:43:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 00:43:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 00:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 744 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7690 KB; 2026-03-28 00:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 00:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2754 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 749 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7713 KB; 2026-03-28 00:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 749 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7683 KB; 2026-03-28 00:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2757 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 750 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7716 KB; 2026-03-28 00:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2758 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 138 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7719 KB; 2026-03-28 00:48:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 00:48:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 00:48:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 00:48:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 00:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 109 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7886 KB; 2026-03-28 00:49:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 00:42:25, To:, 2026-03-28 00:49:25, Duration (s):, 420, Events Per Second:, 0.302, Events:, 127, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 126, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19442 2026-03-28 00:49:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s124ms. 2026-03-28 00:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 00:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 768 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7767 KB; 2026-03-28 00:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7774 KB; 2026-03-28 00:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7740 KB; 2026-03-28 00:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1617 KB; rules::RuleEvaluationCtx: 926 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 127 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7933 KB; 2026-03-28 00:53:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 00:53:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 00:53:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 00:53:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 00:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 1085 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 381 KB; ModuleInfoCache: 311 KB; TcpIpConnectionsManager: 269 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; BaseEvent: 160 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9521 KB; 2026-03-28 00:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 00:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 1111 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 408 KB; ModuleInfoCache: 311 KB; TcpIpConnectionsManager: 277 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; BaseEvent: 172 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9601 KB; 2026-03-28 00:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 1114 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 406 KB; ModuleInfoCache: 311 KB; TcpIpConnectionsManager: 246 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; BaseEvent: 173 KB; cloudutils::CloudData: 109 KB; BatchSerializer::EventsQueueTag: 47 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9575 KB; 2026-03-28 00:56:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 00:49:25, To:, 2026-03-28 00:56:25, Duration (s):, 420, Events Per Second:, 2.324, Events:, 977, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 816, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 160, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 114759 2026-03-28 00:56:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s021ms. 2026-03-28 00:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 959 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 205 KB; TcpIpConnectionsManager: 144 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9117 KB; 2026-03-28 00:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 959 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9112 KB; 2026-03-28 00:58:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 00:58:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 00:58:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 00:58:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 00:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 960 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 408 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9123 KB; 2026-03-28 00:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 00:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 00:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 972 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 20 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8757 KB; 2026-03-28 01:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 972 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8770 KB; 2026-03-28 01:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 1042 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 139 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9032 KB; 2026-03-28 01:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 1042 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; TcpIpConnectionsManager: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 48 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8915 KB; 2026-03-28 01:03:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 00:56:19, To:, 2026-03-28 01:03:25, Duration (s):, 426, Events Per Second:, 0.523, Events:, 223, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 222, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28774 2026-03-28 01:03:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s713ms. 2026-03-28 01:03:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 01:03:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 01:03:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 01:03:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 01:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; TcpIpConnectionsManager: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8597 KB; 2026-03-28 01:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 01:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8570 KB; 2026-03-28 01:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 143 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8554 KB; 2026-03-28 01:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8554 KB; 2026-03-28 01:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8558 KB; 2026-03-28 01:08:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 01:08:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 01:08:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 01:08:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 01:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8559 KB; 2026-03-28 01:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 01:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 109 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8629 KB; 2026-03-28 01:10:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 01:03:35, To:, 2026-03-28 01:10:25, Duration (s):, 410, Events Per Second:, 0.346, Events:, 142, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 141, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18941 2026-03-28 01:10:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s256ms. 2026-03-28 01:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 109 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8647 KB; 2026-03-28 01:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 109 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8603 KB; 2026-03-28 01:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1617 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 311 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 109 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8607 KB; 2026-03-28 01:13:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 01:13:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 01:13:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 01:13:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 01:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2748 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8655 KB; 2026-03-28 01:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 01:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2750 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8654 KB; 2026-03-28 01:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2751 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8667 KB; 2026-03-28 01:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8630 KB; 2026-03-28 01:17:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 01:10:27, To:, 2026-03-28 01:17:25, Duration (s):, 418, Events Per Second:, 0.370, Events:, 155, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 154, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21438 2026-03-28 01:17:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s969ms. 2026-03-28 01:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 732 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 143 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8518 KB; 2026-03-28 01:18:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 01:18:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 01:18:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 01:18:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 01:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 732 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8515 KB; 2026-03-28 01:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 01:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 738 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8531 KB; 2026-03-28 01:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8588 KB; 2026-03-28 01:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8583 KB; 2026-03-28 01:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8595 KB; 2026-03-28 01:23:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 01:23:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 01:23:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 01:23:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 01:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8583 KB; 2026-03-28 01:24:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 01:19:59, To:, 2026-03-28 01:24:25, Duration (s):, 266, Events Per Second:, 0.397, Events:, 106, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 105, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15086 2026-03-28 01:24:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s419ms. 2026-03-28 01:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 01:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 743 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8536 KB; 2026-03-28 01:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 744 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8540 KB; 2026-03-28 01:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 747 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8551 KB; 2026-03-28 01:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 747 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 110 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8544 KB; 2026-03-28 01:28:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 01:28:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 01:28:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 01:28:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 01:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 747 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8550 KB; 2026-03-28 01:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 01:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 753 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8569 KB; 2026-03-28 01:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 765 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8591 KB; 2026-03-28 01:31:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 01:24:27, To:, 2026-03-28 01:31:25, Duration (s):, 418, Events Per Second:, 0.215, Events:, 90, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 89, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13961 2026-03-28 01:31:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s246ms. 2026-03-28 01:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 741 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 84 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8555 KB; 2026-03-28 01:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 744 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 82 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8566 KB; 2026-03-28 01:33:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 01:33:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 01:33:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 01:33:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 01:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8549 KB; 2026-03-28 01:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 01:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 749 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8555 KB; 2026-03-28 01:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 749 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 138 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8552 KB; 2026-03-28 01:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 749 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8552 KB; 2026-03-28 01:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 138 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8563 KB; 2026-03-28 01:38:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 01:31:53, To:, 2026-03-28 01:38:25, Duration (s):, 392, Events Per Second:, 0.155, Events:, 61, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 60, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10074 2026-03-28 01:38:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s423ms. 2026-03-28 01:38:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 01:38:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 01:38:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 01:38:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 01:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8663 KB; 2026-03-28 01:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 01:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 150 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8781 KB; 2026-03-28 01:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 912 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; rules::ProcessConditionsCache: 245 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 111 KB; BaseEvent: 79 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9059 KB; 2026-03-28 01:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; rules::ProcessConditionsCache: 273 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 111 KB; BaseEvent: 91 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9118 KB; 2026-03-28 01:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; rules::RuleEvaluationCtx: 1758 KB; ModuleMetadata: 1625 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 312 KB; rules::ProcessConditionsCache: 271 KB; CacheEntry: 235 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 111 KB; BaseEvent: 94 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9123 KB; 2026-03-28 01:43:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 01:43:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 01:43:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 01:43:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 01:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1628 KB; ProcessInfo: 1073 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; TcpIpConnectionsManager: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; BaseEvent: 157 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9545 KB; 2026-03-28 01:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 01:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 1172 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 236 KB; CacheEntry: 235 KB; BaseEvent: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; rules::ProcessConditionsCache: 120 KB; cloudutils::CloudData: 111 KB; BatchSerializer::EventsQueueTag: 56 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9456 KB; 2026-03-28 01:45:25 7967594126c0 Info: Events Statistics, From:, 2026-03-28 01:38:33, To:, 2026-03-28 01:45:25, Duration (s):, 412, Events Per Second:, 2.985, Events:, 1232, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1040, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 185, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 140750 2026-03-28 01:45:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s507ms. 2026-03-28 01:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; rules::ProcessConditionsCache: 120 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8961 KB; 2026-03-28 01:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 118 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8909 KB; 2026-03-28 01:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 120 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8875 KB; 2026-03-28 01:48:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 01:48:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 01:48:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 01:48:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 01:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 973 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 155 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8982 KB; 2026-03-28 01:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 01:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 1001 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; TcpIpConnectionsManager: 185 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 149 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9000 KB; 2026-03-28 01:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 1048 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; TcpIpConnectionsManager: 231 KB; rules::ProcessConditionsCache: 214 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9180 KB; 2026-03-28 01:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 1048 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; rules::ProcessConditionsCache: 133 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9087 KB; 2026-03-28 01:52:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 01:45:35, To:, 2026-03-28 01:52:26, Duration (s):, 411, Events Per Second:, 0.650, Events:, 267, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 266, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32984 2026-03-28 01:52:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s446ms. 2026-03-28 01:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; TcpIpConnectionsManager: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 134 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8785 KB; 2026-03-28 01:53:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 01:53:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 01:53:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 01:53:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 01:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; TcpIpConnectionsManager: 179 KB; rules::ProcessConditionsCache: 130 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8770 KB; 2026-03-28 01:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 01:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; TcpIpConnectionsManager: 149 KB; rules::ProcessConditionsCache: 137 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8765 KB; 2026-03-28 01:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 146 KB; rules::ProcessConditionsCache: 136 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8769 KB; 2026-03-28 01:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 141 KB; rules::ProcessConditionsCache: 139 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8776 KB; 2026-03-28 01:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1629 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 137 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8792 KB; 2026-03-28 01:58:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 01:58:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 01:58:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 01:58:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 01:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; rules::ProcessConditionsCache: 174 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8888 KB; 2026-03-28 01:59:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 01:53:10, To:, 2026-03-28 01:59:26, Duration (s):, 376, Events Per Second:, 0.354, Events:, 133, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 132, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19551 2026-03-28 01:59:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s727ms. 2026-03-28 01:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 01:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 01:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 177 KB; rules::ProcessConditionsCache: 151 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8755 KB; 2026-03-28 02:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 148 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8745 KB; 2026-03-28 02:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 157 KB; rules::ProcessConditionsCache: 155 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8747 KB; 2026-03-28 02:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; rules::ProcessConditionsCache: 148 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8729 KB; 2026-03-28 02:03:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 02:03:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 02:03:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 02:03:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 02:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 148 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8792 KB; 2026-03-28 02:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 02:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 148 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8779 KB; 2026-03-28 02:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 177 KB; rules::ProcessConditionsCache: 153 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8817 KB; 2026-03-28 02:06:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 01:59:25, To:, 2026-03-28 02:06:26, Duration (s):, 421, Events Per Second:, 0.425, Events:, 179, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 178, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25529 2026-03-28 02:06:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s574ms. 2026-03-28 02:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 757 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 152 KB; rules::ProcessConditionsCache: 151 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8731 KB; 2026-03-28 02:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 757 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 151 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8732 KB; 2026-03-28 02:08:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 02:08:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 02:08:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 02:08:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 02:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 159 KB; rules::ProcessConditionsCache: 157 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8854 KB; 2026-03-28 02:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 02:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 164 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8883 KB; 2026-03-28 02:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2739 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 909 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; rules::ProcessConditionsCache: 300 KB; TcpIpConnectionsManager: 239 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 60 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9198 KB; 2026-03-28 02:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 909 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; TcpIpConnectionsManager: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 60 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9001 KB; 2026-03-28 02:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 909 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; TcpIpConnectionsManager: 213 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; rules::ProcessConditionsCache: 160 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 60 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8994 KB; 2026-03-28 02:13:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 02:06:37, To:, 2026-03-28 02:13:26, Duration (s):, 409, Events Per Second:, 1.012, Events:, 414, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 413, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51737 2026-03-28 02:13:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s848ms. 2026-03-28 02:13:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 02:13:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 02:13:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 02:13:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 02:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; TcpIpConnectionsManager: 189 KB; rules::ProcessConditionsCache: 160 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8785 KB; 2026-03-28 02:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 02:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; rules::ProcessConditionsCache: 166 KB; TcpIpConnectionsManager: 144 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8762 KB; 2026-03-28 02:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; TcpIpConnectionsManager: 170 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8821 KB; 2026-03-28 02:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 170 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8846 KB; 2026-03-28 02:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8829 KB; 2026-03-28 02:18:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 02:18:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 02:18:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 02:18:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 02:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; rules::ProcessConditionsCache: 166 KB; TcpIpConnectionsManager: 138 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8808 KB; 2026-03-28 02:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 02:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 164 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8806 KB; 2026-03-28 02:20:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 02:14:10, To:, 2026-03-28 02:20:26, Duration (s):, 376, Events Per Second:, 0.295, Events:, 111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 110, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15675 2026-03-28 02:20:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s678ms. 2026-03-28 02:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 721 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; rules::ProcessConditionsCache: 173 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8694 KB; 2026-03-28 02:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 721 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; rules::ProcessConditionsCache: 173 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8685 KB; 2026-03-28 02:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 768 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; rules::ProcessConditionsCache: 252 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8882 KB; 2026-03-28 02:23:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 02:23:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 02:23:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 02:23:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 02:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 185 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8797 KB; 2026-03-28 02:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 02:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 189 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8814 KB; 2026-03-28 02:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 177 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8801 KB; 2026-03-28 02:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; CacheEntry: 235 KB; rules::ProcessConditionsCache: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8851 KB; 2026-03-28 02:27:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 02:20:27, To:, 2026-03-28 02:27:26, Duration (s):, 419, Events Per Second:, 0.482, Events:, 202, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 201, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27907 2026-03-28 02:27:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s043ms. 2026-03-28 02:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; rules::ProcessConditionsCache: 236 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8891 KB; 2026-03-28 02:28:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 02:28:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 02:28:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 02:28:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 02:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; rules::ProcessConditionsCache: 254 KB; CacheEntry: 235 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9009 KB; 2026-03-28 02:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 02:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; rules::ProcessConditionsCache: 306 KB; TcpIpConnectionsManager: 287 KB; CacheEntry: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9203 KB; 2026-03-28 02:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1632 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 259 KB; CacheEntry: 235 KB; rules::ProcessConditionsCache: 229 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9109 KB; 2026-03-28 02:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1634 KB; ProcessInfo: 1327 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 451 KB; rules::ProcessConditionsCache: 419 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; BaseEvent: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 111 KB; BatchSerializer::EventsQueueTag: 71 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10192 KB; 2026-03-28 02:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1617 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 538 KB; rules::ProcessConditionsCache: 395 KB; BaseEvent: 393 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; BatchSerializer::EventsQueueTag: 112 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10746 KB; 2026-03-28 02:33:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 02:33:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 02:33:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 02:33:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 02:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1650 KB; ModuleMetadata: 1635 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 527 KB; BaseEvent: 405 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; BatchSerializer::EventsQueueTag: 118 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10499 KB; 2026-03-28 02:34:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 02:27:20, To:, 2026-03-28 02:34:26, Duration (s):, 426, Events Per Second:, 5.804, Events:, 2473, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2132, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 7, Livegrid:, 7, OriginUrl:, 0, Alarms:, 326, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 280920 2026-03-28 02:34:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s359ms. 2026-03-28 02:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 02:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1481 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 408 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9746 KB; 2026-03-28 02:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1495 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 251 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9558 KB; 2026-03-28 02:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1523 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 246 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9604 KB; 2026-03-28 02:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1523 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 41 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9491 KB; 2026-03-28 02:38:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 02:38:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 02:38:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 02:38:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 02:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 47 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9536 KB; 2026-03-28 02:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 02:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1614 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; rules::ProcessConditionsCache: 131 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 53 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9708 KB; 2026-03-28 02:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 98 KB; BaseEvent: 60 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9690 KB; 2026-03-28 02:41:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 02:34:25, To:, 2026-03-28 02:41:26, Duration (s):, 421, Events Per Second:, 1.195, Events:, 504, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 503, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 65444 2026-03-28 02:41:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s210ms. 2026-03-28 02:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; rules::ProcessConditionsCache: 150 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8915 KB; 2026-03-28 02:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 124 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8906 KB; 2026-03-28 02:43:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 02:43:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 02:43:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 02:43:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 02:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 887 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8893 KB; 2026-03-28 02:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 02:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 236 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; rules::ProcessConditionsCache: 126 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8971 KB; 2026-03-28 02:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 213 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8890 KB; 2026-03-28 02:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 923 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 91 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8910 KB; 2026-03-28 02:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 929 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8893 KB; 2026-03-28 02:48:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 02:41:24, To:, 2026-03-28 02:48:26, Duration (s):, 422, Events Per Second:, 0.717, Events:, 303, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 302, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38579 2026-03-28 02:48:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s580ms. 2026-03-28 02:48:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 02:48:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 02:48:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 02:48:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 02:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 756 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8644 KB; 2026-03-28 02:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 02:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8653 KB; 2026-03-28 02:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 207 KB; TcpIpConnectionsManager: 179 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8829 KB; 2026-03-28 02:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8763 KB; 2026-03-28 02:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 111 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8731 KB; 2026-03-28 02:53:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 02:53:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 02:53:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 02:53:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 02:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1047 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 336 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 289 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; BaseEvent: 127 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9488 KB; 2026-03-28 02:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 02:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1085 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 400 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 298 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 205 KB; BaseEvent: 137 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9632 KB; 2026-03-28 02:55:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 02:49:40, To:, 2026-03-28 02:55:26, Duration (s):, 346, Events Per Second:, 2.506, Events:, 869, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 753, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 115, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 101699 2026-03-28 02:55:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s975ms. 2026-03-28 02:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1025 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 368 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 302 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9355 KB; 2026-03-28 02:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1025 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 337 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9213 KB; 2026-03-28 02:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1635 KB; ProcessInfo: 1036 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 355 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9252 KB; 2026-03-28 02:58:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 02:58:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 02:58:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 02:58:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 02:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 1088 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 112 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9137 KB; 2026-03-28 02:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 02:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 02:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 1104 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 231 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9243 KB; 2026-03-28 03:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 1164 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 234 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9387 KB; 2026-03-28 03:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 1164 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 155 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9283 KB; 2026-03-28 03:02:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 02:55:26, To:, 2026-03-28 03:01:54, Duration (s):, 388, Events Per Second:, 0.992, Events:, 385, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 382, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53524 2026-03-28 03:02:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s833ms. 2026-03-28 03:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 157 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8917 KB; 2026-03-28 03:03:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 03:03:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 03:03:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 03:03:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 03:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; rules::ProcessConditionsCache: 251 KB; TcpIpConnectionsManager: 243 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9101 KB; 2026-03-28 03:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 03:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9001 KB; 2026-03-28 03:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9039 KB; 2026-03-28 03:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 241 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9065 KB; 2026-03-28 03:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 51 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9048 KB; 2026-03-28 03:08:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 03:08:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 03:08:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 03:08:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 03:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 981 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 173 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 59 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9117 KB; 2026-03-28 03:09:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 03:03:11, To:, 2026-03-28 03:09:26, Duration (s):, 375, Events Per Second:, 0.947, Events:, 356, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 355, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43893 2026-03-28 03:09:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s454ms. 2026-03-28 03:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 03:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; rules::ProcessConditionsCache: 183 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8896 KB; 2026-03-28 03:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; rules::ProcessConditionsCache: 180 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8900 KB; 2026-03-28 03:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; rules::ProcessConditionsCache: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 236 KB; CacheEntry: 236 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9126 KB; 2026-03-28 03:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 236 KB; CacheEntry: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9025 KB; 2026-03-28 03:14:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 03:14:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 03:14:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 03:14:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 03:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 237 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9020 KB; 2026-03-28 03:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 03:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 237 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9007 KB; 2026-03-28 03:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 237 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; rules::ProcessConditionsCache: 180 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8976 KB; 2026-03-28 03:16:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 03:10:00, To:, 2026-03-28 03:16:26, Duration (s):, 386, Events Per Second:, 0.486, Events:, 188, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 187, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24786 2026-03-28 03:16:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s921ms. 2026-03-28 03:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 237 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; rules::ProcessConditionsCache: 183 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8810 KB; 2026-03-28 03:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1637 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 237 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; rules::ProcessConditionsCache: 183 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8813 KB; 2026-03-28 03:19:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 03:19:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 03:19:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 03:19:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 03:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1639 KB; ProcessInfo: 1047 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 290 KB; CacheEntry: 237 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; BaseEvent: 139 KB; cloudutils::CloudData: 113 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9311 KB; 2026-03-28 03:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 03:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1643 KB; ProcessInfo: 1320 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 402 KB; rules::ProcessConditionsCache: 393 KB; ModuleInfoCache: 315 KB; BaseEvent: 276 KB; CacheEntry: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; cloudutils::CloudData: 112 KB; BatchSerializer::EventsQueueTag: 72 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10180 KB; 2026-03-28 03:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1643 KB; ProcessInfo: 1345 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 417 KB; TcpIpConnectionsManager: 412 KB; ModuleInfoCache: 315 KB; BaseEvent: 289 KB; CacheEntry: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; cloudutils::CloudData: 112 KB; BatchSerializer::EventsQueueTag: 75 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10253 KB; 2026-03-28 03:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1643 KB; ProcessInfo: 1345 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 417 KB; ModuleInfoCache: 315 KB; TcpIpConnectionsManager: 290 KB; BaseEvent: 290 KB; CacheEntry: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; cloudutils::CloudData: 112 KB; BatchSerializer::EventsQueueTag: 76 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10122 KB; 2026-03-28 03:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1643 KB; ProcessInfo: 1345 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 419 KB; ModuleInfoCache: 315 KB; BaseEvent: 291 KB; CacheEntry: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 112 KB; BatchSerializer::EventsQueueTag: 76 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10018 KB; 2026-03-28 03:23:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 03:17:00, To:, 2026-03-28 03:23:26, Duration (s):, 386, Events Per Second:, 4.189, Events:, 1620, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1315, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 12, Livegrid:, 12, OriginUrl:, 0, Alarms:, 280, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 181255 2026-03-28 03:23:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s845ms. 2026-03-28 03:24:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 03:24:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 03:24:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 03:24:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 03:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1643 KB; ProcessInfo: 778 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 418 KB; ModuleInfoCache: 315 KB; CacheEntry: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9072 KB; 2026-03-28 03:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 03:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1643 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 315 KB; CacheEntry: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8675 KB; 2026-03-28 03:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1643 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; CacheEntry: 238 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8702 KB; 2026-03-28 03:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1643 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 315 KB; CacheEntry: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8701 KB; 2026-03-28 03:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; rules::RuleEvaluationCtx: 1822 KB; ModuleMetadata: 1643 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; CacheEntry: 238 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 112 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8704 KB; 2026-03-28 03:29:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 03:29:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 03:29:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 03:29:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 03:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8961 KB; 2026-03-28 03:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 03:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8963 KB; 2026-03-28 03:30:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 03:24:13, To:, 2026-03-28 03:30:26, Duration (s):, 373, Events Per Second:, 0.040, Events:, 15, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 14, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 4110 2026-03-28 03:30:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s396ms. 2026-03-28 03:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 757 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8951 KB; 2026-03-28 03:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 8938 KB; 2026-03-28 03:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8947 KB; 2026-03-28 03:34:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 03:34:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 03:34:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 03:34:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 03:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 762 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 125 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8951 KB; 2026-03-28 03:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 03:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 765 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 125 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8963 KB; 2026-03-28 03:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 768 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 125 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8967 KB; 2026-03-28 03:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 125 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8950 KB; 2026-03-28 03:37:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 03:30:29, To:, 2026-03-28 03:37:26, Duration (s):, 417, Events Per Second:, 0.110, Events:, 46, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 45, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9186 2026-03-28 03:37:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s117ms. 2026-03-28 03:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 757 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 125 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8943 KB; 2026-03-28 03:39:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 03:39:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 03:39:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 03:39:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 03:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 125 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9016 KB; 2026-03-28 03:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 03:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 125 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9211 KB; 2026-03-28 03:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 125 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9130 KB; 2026-03-28 03:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 125 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9115 KB; 2026-03-28 03:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1835 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 340 KB; CacheEntry: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 125 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9089 KB; 2026-03-28 03:44:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 03:44:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 03:44:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 03:44:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 03:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 341 KB; CacheEntry: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 126 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9079 KB; 2026-03-28 03:44:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 03:37:34, To:, 2026-03-28 03:44:26, Duration (s):, 412, Events Per Second:, 0.654, Events:, 270, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 269, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34449 2026-03-28 03:44:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s105ms. 2026-03-28 03:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 03:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 341 KB; CacheEntry: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 126 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9082 KB; 2026-03-28 03:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 341 KB; CacheEntry: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 197 KB; rules::ProcessConditionsCache: 138 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9159 KB; 2026-03-28 03:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 341 KB; CacheEntry: 265 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 126 KB; BaseEvent: 70 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9390 KB; 2026-03-28 03:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 307 KB; CacheEntry: 265 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 126 KB; BaseEvent: 107 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9638 KB; 2026-03-28 03:49:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 03:49:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 03:49:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 03:49:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 03:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 294 KB; CacheEntry: 265 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 126 KB; BaseEvent: 109 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9619 KB; 2026-03-28 03:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 03:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 294 KB; CacheEntry: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 126 KB; BaseEvent: 107 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9590 KB; 2026-03-28 03:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 984 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 300 KB; CacheEntry: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 126 KB; BaseEvent: 109 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9569 KB; 2026-03-28 03:51:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 03:44:58, To:, 2026-03-28 03:51:26, Duration (s):, 388, Events Per Second:, 1.641, Events:, 638, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 532, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 105, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 74198 2026-03-28 03:51:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s825ms. 2026-03-28 03:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 757 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 301 KB; CacheEntry: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9185 KB; 2026-03-28 03:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 757 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 301 KB; CacheEntry: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9190 KB; 2026-03-28 03:54:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 03:54:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 03:54:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 03:54:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 03:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 757 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 301 KB; CacheEntry: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9191 KB; 2026-03-28 03:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 03:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 303 KB; CacheEntry: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9196 KB; 2026-03-28 03:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 329 KB; CacheEntry: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9277 KB; 2026-03-28 03:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 329 KB; CacheEntry: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9279 KB; 2026-03-28 03:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 1843 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 353 KB; ModuleInfoCache: 341 KB; CacheEntry: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9354 KB; 2026-03-28 03:58:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 03:55:01, To:, 2026-03-28 03:58:26, Duration (s):, 205, Events Per Second:, 0.690, Events:, 142, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 118, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18752 2026-03-28 03:58:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s027ms. 2026-03-28 03:59:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 03:59:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 03:59:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 03:59:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 03:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 355 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9313 KB; 2026-03-28 03:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 03:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 03:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 368 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9349 KB; 2026-03-28 04:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 370 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9354 KB; 2026-03-28 04:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 370 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9342 KB; 2026-03-28 04:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 379 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9357 KB; 2026-03-28 04:04:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 04:04:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 04:04:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 04:04:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 04:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 379 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9355 KB; 2026-03-28 04:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 04:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 379 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9354 KB; 2026-03-28 04:05:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 04:00:01, To:, 2026-03-28 04:05:26, Duration (s):, 325, Events Per Second:, 0.126, Events:, 41, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 40, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7855 2026-03-28 04:05:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s530ms. 2026-03-28 04:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 378 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9281 KB; 2026-03-28 04:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 752 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 378 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9281 KB; 2026-03-28 04:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 386 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9309 KB; 2026-03-28 04:09:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 04:09:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 04:09:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 04:09:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 04:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 400 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9446 KB; 2026-03-28 04:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 04:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 409 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9475 KB; 2026-03-28 04:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9489 KB; 2026-03-28 04:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 409 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9457 KB; 2026-03-28 04:12:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 04:03:11, To:, 2026-03-28 04:12:26, Duration (s):, 555, Events Per Second:, 0.471, Events:, 262, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 261, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34568 2026-03-28 04:12:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s947ms. 2026-03-28 04:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 1850 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 407 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 125 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9327 KB; 2026-03-28 04:14:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 04:14:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 04:14:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 04:14:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 04:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 1853 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 407 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9329 KB; 2026-03-28 04:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 04:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2739 KB; ModuleMetadata: 1853 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 409 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9367 KB; 2026-03-28 04:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2740 KB; ModuleMetadata: 1853 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 409 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 9371 KB; 2026-03-28 04:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 1853 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 778 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9381 KB; 2026-03-28 04:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1853 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 126 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9020 KB; 2026-03-28 04:19:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 04:19:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 04:19:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 04:19:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 04:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1853 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 342 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 126 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9000 KB; 2026-03-28 04:19:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 04:13:16, To:, 2026-03-28 04:19:26, Duration (s):, 370, Events Per Second:, 0.251, Events:, 93, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 92, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13601 2026-03-28 04:19:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s949ms. 2026-03-28 04:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 04:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1853 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1094 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 368 KB; ModuleInfoCache: 342 KB; TcpIpConnectionsManager: 341 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; BaseEvent: 144 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9949 KB; 2026-03-28 04:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 1857 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1414 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 461 KB; ModuleInfoCache: 344 KB; BaseEvent: 301 KB; rules::ProcessConditionsCache: 298 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 127 KB; BatchSerializer::EventsQueueTag: 80 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10527 KB; 2026-03-28 04:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2685 KB; ModuleMetadata: 1857 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1420 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 461 KB; ModuleInfoCache: 344 KB; BaseEvent: 304 KB; rules::ProcessConditionsCache: 293 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 127 KB; BatchSerializer::EventsQueueTag: 81 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10514 KB; 2026-03-28 04:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1857 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1420 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; TcpIpConnectionsManager: 320 KB; BaseEvent: 306 KB; rules::ProcessConditionsCache: 296 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 127 KB; BatchSerializer::EventsQueueTag: 81 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10384 KB; 2026-03-28 04:24:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 04:24:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 04:24:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 04:24:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 04:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1857 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1420 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; BaseEvent: 307 KB; rules::ProcessConditionsCache: 296 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 127 KB; BatchSerializer::EventsQueueTag: 82 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10247 KB; 2026-03-28 04:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 04:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 1857 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1423 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; BaseEvent: 310 KB; rules::ProcessConditionsCache: 298 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 127 KB; BatchSerializer::EventsQueueTag: 83 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10250 KB; 2026-03-28 04:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1857 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1424 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; rules::ProcessConditionsCache: 326 KB; BaseEvent: 310 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 127 KB; BatchSerializer::EventsQueueTag: 83 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10280 KB; 2026-03-28 04:26:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 04:19:37, To:, 2026-03-28 04:26:26, Duration (s):, 409, Events Per Second:, 4.304, Events:, 1764, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1460, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 7, Livegrid:, 7, OriginUrl:, 0, Alarms:, 289, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 197649 2026-03-28 04:26:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s344ms. 2026-03-28 04:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 1857 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 756 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9220 KB; 2026-03-28 04:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1857 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 231 KB; rules::ProcessConditionsCache: 135 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9188 KB; 2026-03-28 04:29:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 04:29:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 04:29:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 04:29:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 04:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9053 KB; 2026-03-28 04:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 04:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9107 KB; 2026-03-28 04:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 40 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9091 KB; 2026-03-28 04:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 127 KB; BaseEvent: 58 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9091 KB; 2026-03-28 04:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 127 KB; BaseEvent: 58 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9100 KB; 2026-03-28 04:33:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 04:27:41, To:, 2026-03-28 04:33:26, Duration (s):, 345, Events Per Second:, 0.931, Events:, 322, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 175, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 73, Livegrid:, 73, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34815 2026-03-28 04:33:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s672ms. 2026-03-28 04:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 754 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8958 KB; 2026-03-28 04:34:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 04:34:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 04:34:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 04:34:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 04:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 04:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 759 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 45 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8970 KB; 2026-03-28 04:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9020 KB; 2026-03-28 04:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8991 KB; 2026-03-28 04:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8995 KB; 2026-03-28 04:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 127 KB; BaseEvent: 62 KB; ProcessInfoCommandLineTag: 54 KB; rules::ProcessConditionsCache: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9117 KB; 2026-03-28 04:39:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 04:39:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 04:39:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 04:39:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 04:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 04:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 127 KB; BaseEvent: 63 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9128 KB; 2026-03-28 04:40:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 04:33:47, To:, 2026-03-28 04:40:26, Duration (s):, 399, Events Per Second:, 0.903, Events:, 361, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 196, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 82, Livegrid:, 82, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39424 2026-03-28 04:40:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s984ms. 2026-03-28 04:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9103 KB; 2026-03-28 04:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9055 KB; 2026-03-28 04:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9058 KB; 2026-03-28 04:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9075 KB; 2026-03-28 04:44:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 04:44:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 04:44:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 04:44:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 04:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 04:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9074 KB; 2026-03-28 04:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9072 KB; 2026-03-28 04:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9075 KB; 2026-03-28 04:47:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 04:40:45, To:, 2026-03-28 04:47:26, Duration (s):, 401, Events Per Second:, 0.202, Events:, 81, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 76, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12193 2026-03-28 04:47:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s827ms. 2026-03-28 04:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 762 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 8985 KB; 2026-03-28 04:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 220 KB; rules::ProcessConditionsCache: 151 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9211 KB; 2026-03-28 04:49:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 04:49:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 04:49:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 04:49:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 04:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 04:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9066 KB; 2026-03-28 04:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9081 KB; 2026-03-28 04:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9242 KB; 2026-03-28 04:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1101 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 373 KB; ModuleInfoCache: 344 KB; TcpIpConnectionsManager: 287 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; BaseEvent: 165 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9974 KB; 2026-03-28 04:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2685 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1207 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; TcpIpConnectionsManager: 339 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; BaseEvent: 213 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 79 KB; BatchSerializer::EventsQueueTag: 59 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9856 KB; 2026-03-28 04:54:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 04:54:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 04:54:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 04:54:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 04:54:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 04:48:54, To:, 2026-03-28 04:54:26, Duration (s):, 332, Events Per Second:, 3.764, Events:, 1253, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1024, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 22, Livegrid:, 22, OriginUrl:, 0, Alarms:, 184, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 140752 2026-03-28 04:54:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s983ms. 2026-03-28 04:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 04:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2686 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1150 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; TcpIpConnectionsManager: 320 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9511 KB; 2026-03-28 04:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1150 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9412 KB; 2026-03-28 04:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1154 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9372 KB; 2026-03-28 04:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 1859 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1154 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; CacheEntry: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9375 KB; 2026-03-28 04:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 1860 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1154 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; CacheEntry: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9382 KB; 2026-03-28 04:59:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 04:59:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 04:59:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 04:59:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 04:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 04:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 04:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1860 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1177 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; CacheEntry: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9445 KB; 2026-03-28 05:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1860 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1177 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; CacheEntry: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9446 KB; 2026-03-28 05:01:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 04:55:00, To:, 2026-03-28 05:01:26, Duration (s):, 386, Events Per Second:, 0.248, Events:, 96, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 89, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14626 2026-03-28 05:01:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s166ms. 2026-03-28 05:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2681 KB; ModuleMetadata: 1860 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9033 KB; 2026-03-28 05:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2683 KB; ModuleMetadata: 1860 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9028 KB; 2026-03-28 05:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2685 KB; ModuleMetadata: 1860 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; CacheEntry: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9033 KB; 2026-03-28 05:04:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 05:04:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 05:04:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 05:04:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 05:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 05:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2686 KB; ModuleMetadata: 1860 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9030 KB; 2026-03-28 05:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1860 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 935 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 267 KB; rules::ProcessConditionsCache: 254 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 127 KB; BaseEvent: 70 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9487 KB; 2026-03-28 05:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2686 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1151 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; TcpIpConnectionsManager: 325 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; BaseEvent: 176 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 49 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9758 KB; 2026-03-28 05:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1151 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; TcpIpConnectionsManager: 325 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; BaseEvent: 176 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 49 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9757 KB; 2026-03-28 05:08:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 05:01:34, To:, 2026-03-28 05:08:26, Duration (s):, 412, Events Per Second:, 2.480, Events:, 1024, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 847, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 168, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 115830 2026-03-28 05:08:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s969ms. 2026-03-28 05:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1154 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9525 KB; 2026-03-28 05:09:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 05:09:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 05:09:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 05:09:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 05:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 05:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1158 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9445 KB; 2026-03-28 05:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1160 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9452 KB; 2026-03-28 05:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2679 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1195 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9518 KB; 2026-03-28 05:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2680 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1197 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9507 KB; 2026-03-28 05:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2682 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1201 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9518 KB; 2026-03-28 05:14:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 05:14:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 05:14:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 05:14:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 05:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 05:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2684 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1208 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9528 KB; 2026-03-28 05:15:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 05:09:00, To:, 2026-03-28 05:15:26, Duration (s):, 386, Events Per Second:, 0.662, Events:, 256, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 255, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33821 2026-03-28 05:15:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s671ms. 2026-03-28 05:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2685 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9082 KB; 2026-03-28 05:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2685 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9097 KB; 2026-03-28 05:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2686 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 131 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9162 KB; 2026-03-28 05:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9150 KB; 2026-03-28 05:19:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 05:19:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 05:19:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 05:19:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 05:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 05:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; rules::ProcessConditionsCache: 140 KB; cloudutils::CloudData: 127 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9232 KB; 2026-03-28 05:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9189 KB; 2026-03-28 05:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9170 KB; 2026-03-28 05:22:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 05:15:24, To:, 2026-03-28 05:22:26, Duration (s):, 422, Events Per Second:, 0.511, Events:, 216, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 213, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28619 2026-03-28 05:22:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s689ms. 2026-03-28 05:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9058 KB; 2026-03-28 05:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9074 KB; 2026-03-28 05:24:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 05:24:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 05:24:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 05:24:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 05:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 05:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9079 KB; 2026-03-28 05:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9094 KB; 2026-03-28 05:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2685 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9071 KB; 2026-03-28 05:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2687 KB; ModuleMetadata: 1864 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9094 KB; 2026-03-28 05:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9304 KB; 2026-03-28 05:29:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 05:29:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 05:29:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 05:29:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 05:29:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 05:25:01, To:, 2026-03-28 05:29:26, Duration (s):, 265, Events Per Second:, 0.707, Events:, 188, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 185, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26342 2026-03-28 05:29:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s542ms. 2026-03-28 05:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 05:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 147 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9214 KB; 2026-03-28 05:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 149 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9262 KB; 2026-03-28 05:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2680 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 129 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9207 KB; 2026-03-28 05:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2682 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 129 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9186 KB; 2026-03-28 05:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2683 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 177 KB; rules::ProcessConditionsCache: 129 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9164 KB; 2026-03-28 05:34:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 05:34:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 05:34:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 05:34:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 05:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 05:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2684 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 869 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 131 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9164 KB; 2026-03-28 05:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2686 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 869 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 131 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9169 KB; 2026-03-28 05:36:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 05:29:26, To:, 2026-03-28 05:36:26, Duration (s):, 420, Events Per Second:, 0.328, Events:, 138, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 137, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21168 2026-03-28 05:36:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s684ms. 2026-03-28 05:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2687 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 756 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; rules::ProcessConditionsCache: 138 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9041 KB; 2026-03-28 05:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 756 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 169 KB; rules::ProcessConditionsCache: 131 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9034 KB; 2026-03-28 05:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 169 KB; rules::ProcessConditionsCache: 134 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9099 KB; 2026-03-28 05:39:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 05:39:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 05:39:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 05:39:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 05:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 05:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; rules::ProcessConditionsCache: 140 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9118 KB; 2026-03-28 05:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 140 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9121 KB; 2026-03-28 05:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 140 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9128 KB; 2026-03-28 05:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1865 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 145 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9147 KB; 2026-03-28 05:43:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 05:36:47, To:, 2026-03-28 05:43:26, Duration (s):, 399, Events Per Second:, 0.353, Events:, 141, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 140, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19227 2026-03-28 05:43:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s072ms. 2026-03-28 05:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2683 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 270 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; cloudutils::CloudData: 128 KB; BaseEvent: 71 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9609 KB; 2026-03-28 05:44:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 05:44:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 05:44:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 05:44:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 05:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 05:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2684 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1123 KB; rules::AncestorEvaluations: 556 KB; TcpIpConnectionsManager: 346 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; BaseEvent: 167 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9778 KB; 2026-03-28 05:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1147 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 372 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; BaseEvent: 171 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 117 KB; BatchSerializer::EventsQueueTag: 47 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9898 KB; 2026-03-28 05:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1169 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; TcpIpConnectionsManager: 335 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; BaseEvent: 175 KB; rules::ProcessConditionsCache: 150 KB; cloudutils::CloudData: 128 KB; BatchSerializer::EventsQueueTag: 50 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9902 KB; 2026-03-28 05:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1169 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; BaseEvent: 181 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 113 KB; BatchSerializer::EventsQueueTag: 51 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9746 KB; 2026-03-28 05:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1170 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 197 KB; BaseEvent: 182 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 113 KB; BatchSerializer::EventsQueueTag: 52 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9717 KB; 2026-03-28 05:49:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 05:49:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 05:49:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 05:49:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 05:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 05:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1176 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 185 KB; BaseEvent: 183 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 123 KB; BatchSerializer::EventsQueueTag: 53 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9727 KB; 2026-03-28 05:50:26 7967594126c0 Info: Events Statistics, From:, 2026-03-28 05:43:21, To:, 2026-03-28 05:50:26, Duration (s):, 425, Events Per Second:, 2.679, Events:, 1141, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 981, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 159, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 130147 2026-03-28 05:50:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s964ms. 2026-03-28 05:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9069 KB; 2026-03-28 05:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9074 KB; 2026-03-28 05:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9078 KB; 2026-03-28 05:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9079 KB; 2026-03-28 05:54:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 05:54:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 05:54:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 05:54:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 05:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 05:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 774 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9091 KB; 2026-03-28 05:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 127 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9104 KB; 2026-03-28 05:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2684 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 173 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9218 KB; 2026-03-28 05:57:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 05:51:04, To:, 2026-03-28 05:57:26, Duration (s):, 382, Events Per Second:, 0.353, Events:, 135, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 129, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19476 2026-03-28 05:57:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s754ms. 2026-03-28 05:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2685 KB; ModuleMetadata: 1875 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 129 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9133 KB; 2026-03-28 05:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2687 KB; ModuleMetadata: 1876 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 129 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9137 KB; 2026-03-28 05:59:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 05:59:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 05:59:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 05:59:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 05:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 05:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 05:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1876 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 185 KB; rules::ProcessConditionsCache: 142 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9143 KB; 2026-03-28 06:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1876 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; rules::ProcessConditionsCache: 188 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9292 KB; 2026-03-28 06:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 1876 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 186 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9297 KB; 2026-03-28 06:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1876 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; rules::ProcessConditionsCache: 186 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9300 KB; 2026-03-28 06:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1876 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 922 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 210 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9377 KB; 2026-03-28 06:04:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 06:04:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 06:04:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 06:04:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 06:04:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 05:57:26, To:, 2026-03-28 06:04:27, Duration (s):, 421, Events Per Second:, 0.743, Events:, 313, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 299, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40955 2026-03-28 06:04:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s349ms. 2026-03-28 06:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 06:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1878 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1069 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 346 KB; TcpIpConnectionsManager: 297 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; BaseEvent: 142 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9679 KB; 2026-03-28 06:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 1878 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1094 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 346 KB; TcpIpConnectionsManager: 326 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; rules::ProcessConditionsCache: 184 KB; BaseEvent: 146 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9817 KB; 2026-03-28 06:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2686 KB; ModuleMetadata: 1878 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1094 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; TcpIpConnectionsManager: 326 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; BaseEvent: 149 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 127 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9718 KB; 2026-03-28 06:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1878 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1094 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 195 KB; BaseEvent: 150 KB; cloudutils::CloudData: 128 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9610 KB; 2026-03-28 06:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 1878 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1136 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 190 KB; BaseEvent: 159 KB; rules::ProcessConditionsCache: 134 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9681 KB; 2026-03-28 06:09:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 06:09:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 06:09:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 06:09:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 06:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 06:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1878 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1144 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 167 KB; BaseEvent: 161 KB; rules::ProcessConditionsCache: 142 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9683 KB; 2026-03-28 06:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 1878 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1145 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; BaseEvent: 162 KB; rules::ProcessConditionsCache: 142 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9689 KB; 2026-03-28 06:11:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 06:04:27, To:, 2026-03-28 06:11:27, Duration (s):, 420, Events Per Second:, 2.395, Events:, 1006, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 854, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 141, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 115760 2026-03-28 06:11:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s244ms. 2026-03-28 06:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1878 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 142 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9126 KB; 2026-03-28 06:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1878 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9133 KB; 2026-03-28 06:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1878 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9136 KB; 2026-03-28 06:14:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 06:14:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 06:14:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 06:14:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 06:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 06:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 912 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; rules::ProcessConditionsCache: 213 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 60 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9363 KB; 2026-03-28 06:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 912 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; rules::ProcessConditionsCache: 213 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 61 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9366 KB; 2026-03-28 06:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2770 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 916 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 217 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 60 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9440 KB; 2026-03-28 06:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2771 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; rules::ProcessConditionsCache: 223 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 60 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9458 KB; 2026-03-28 06:18:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 06:15:00, To:, 2026-03-28 06:18:27, Duration (s):, 207, Events Per Second:, 1.589, Events:, 329, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 276, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38786 2026-03-28 06:18:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s673ms. 2026-03-28 06:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2792 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 217 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9252 KB; 2026-03-28 06:19:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 06:19:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 06:19:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 06:19:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 06:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 06:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; rules::ProcessConditionsCache: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9245 KB; 2026-03-28 06:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; rules::ProcessConditionsCache: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9264 KB; 2026-03-28 06:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; rules::ProcessConditionsCache: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9249 KB; 2026-03-28 06:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; rules::ProcessConditionsCache: 221 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9234 KB; 2026-03-28 06:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; rules::ProcessConditionsCache: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9226 KB; 2026-03-28 06:24:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 06:24:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 06:24:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 06:24:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 06:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 06:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; rules::ProcessConditionsCache: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9280 KB; 2026-03-28 06:25:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 06:18:20, To:, 2026-03-28 06:25:27, Duration (s):, 427, Events Per Second:, 0.297, Events:, 127, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 126, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18341 2026-03-28 06:25:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s199ms. 2026-03-28 06:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9164 KB; 2026-03-28 06:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; rules::ProcessConditionsCache: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9163 KB; 2026-03-28 06:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9176 KB; 2026-03-28 06:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 1879 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 346 KB; CacheEntry: 270 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9209 KB; 2026-03-28 06:29:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 06:29:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 06:29:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 06:29:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 06:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 06:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9223 KB; 2026-03-28 06:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9273 KB; 2026-03-28 06:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2683 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9271 KB; 2026-03-28 06:32:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 06:25:27, To:, 2026-03-28 06:32:27, Duration (s):, 420, Events Per Second:, 0.338, Events:, 142, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 141, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21013 2026-03-28 06:32:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s405ms. 2026-03-28 06:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2685 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9284 KB; 2026-03-28 06:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2685 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 240 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9248 KB; 2026-03-28 06:34:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 06:34:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 06:34:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 06:34:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 06:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 06:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 328 KB; CacheEntry: 271 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9460 KB; 2026-03-28 06:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2687 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 242 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9343 KB; 2026-03-28 06:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 240 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9337 KB; 2026-03-28 06:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9335 KB; 2026-03-28 06:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 916 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9409 KB; 2026-03-28 06:39:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 06:32:23, To:, 2026-03-28 06:39:27, Duration (s):, 424, Events Per Second:, 0.839, Events:, 356, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 355, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 45137 2026-03-28 06:39:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 06:39:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 06:39:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 06:39:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 06:39:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s875ms. 2026-03-28 06:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 06:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9275 KB; 2026-03-28 06:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9273 KB; 2026-03-28 06:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2683 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9301 KB; 2026-03-28 06:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2684 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9286 KB; 2026-03-28 06:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2685 KB; ModuleMetadata: 1882 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9305 KB; 2026-03-28 06:44:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 06:44:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 06:44:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 06:44:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 06:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 06:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1884 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9339 KB; 2026-03-28 06:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 1884 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9342 KB; 2026-03-28 06:46:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 06:39:26, To:, 2026-03-28 06:46:27, Duration (s):, 421, Events Per Second:, 0.280, Events:, 118, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 117, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18019 2026-03-28 06:46:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s676ms. 2026-03-28 06:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 308 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9377 KB; 2026-03-28 06:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 335 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9459 KB; 2026-03-28 06:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9469 KB; 2026-03-28 06:49:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 06:49:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 06:49:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 06:49:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 06:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 06:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 345 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9474 KB; 2026-03-28 06:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 345 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9474 KB; 2026-03-28 06:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2686 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 345 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9439 KB; 2026-03-28 06:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 909 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 394 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 128 KB; BaseEvent: 62 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9626 KB; 2026-03-28 06:53:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 06:47:17, To:, 2026-03-28 06:53:27, Duration (s):, 370, Events Per Second:, 1.070, Events:, 396, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 333, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 58, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47110 2026-03-28 06:53:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s309ms. 2026-03-28 06:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2751 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1148 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 376 KB; rules::ProcessConditionsCache: 374 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; BaseEvent: 142 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10154 KB; 2026-03-28 06:54:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 06:54:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 06:54:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 06:54:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 06:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 06:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1150 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 364 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 337 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; BaseEvent: 145 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10076 KB; 2026-03-28 06:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1175 KB; rules::AncestorEvaluations: 556 KB; TcpIpConnectionsManager: 367 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; BaseEvent: 152 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10083 KB; 2026-03-28 06:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1176 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 335 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 210 KB; BaseEvent: 155 KB; cloudutils::CloudData: 128 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9916 KB; 2026-03-28 06:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1176 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 335 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 195 KB; BaseEvent: 156 KB; cloudutils::CloudData: 128 KB; BatchSerializer::EventsQueueTag: 45 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9908 KB; 2026-03-28 06:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1885 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1176 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 335 KB; CacheEntry: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 177 KB; BaseEvent: 156 KB; cloudutils::CloudData: 128 KB; BatchSerializer::EventsQueueTag: 45 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9892 KB; 2026-03-28 06:59:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 06:59:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 06:59:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 06:59:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 06:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 06:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 06:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 1890 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 1189 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 352 KB; ModuleInfoCache: 347 KB; CacheEntry: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; BaseEvent: 160 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9932 KB; 2026-03-28 07:00:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 06:53:26, To:, 2026-03-28 07:00:27, Duration (s):, 421, Events Per Second:, 2.394, Events:, 1008, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 873, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 134, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 116442 2026-03-28 07:00:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s150ms. 2026-03-28 07:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 1890 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 352 KB; ModuleInfoCache: 347 KB; CacheEntry: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9305 KB; 2026-03-28 07:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2686 KB; ModuleMetadata: 1890 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 352 KB; ModuleInfoCache: 347 KB; CacheEntry: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9295 KB; 2026-03-28 07:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1890 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 352 KB; ModuleInfoCache: 347 KB; CacheEntry: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9301 KB; 2026-03-28 07:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 1890 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 357 KB; ModuleInfoCache: 347 KB; CacheEntry: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9316 KB; 2026-03-28 07:04:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 07:04:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 07:04:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 07:04:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 07:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 07:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 1893 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 357 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9324 KB; 2026-03-28 07:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 1893 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 357 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9325 KB; 2026-03-28 07:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 1895 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 357 KB; ModuleInfoCache: 348 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9330 KB; 2026-03-28 07:07:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 07:03:16, To:, 2026-03-28 07:07:27, Duration (s):, 251, Events Per Second:, 0.115, Events:, 29, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 14, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 7, Livegrid:, 7, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 4989 2026-03-28 07:07:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s948ms. 2026-03-28 07:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 1895 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 358 KB; ModuleInfoCache: 348 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9354 KB; 2026-03-28 07:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 1895 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 362 KB; ModuleInfoCache: 348 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9425 KB; 2026-03-28 07:09:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 07:09:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 07:09:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 07:09:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 07:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 07:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 1895 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 369 KB; ModuleInfoCache: 348 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9440 KB; 2026-03-28 07:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 1895 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 348 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 54 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9106 KB; 2026-03-28 07:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2686 KB; ModuleMetadata: 1895 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 348 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 54 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9096 KB; 2026-03-28 07:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2687 KB; ModuleMetadata: 1895 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 348 KB; CacheEntry: 273 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 54 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9145 KB; 2026-03-28 07:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1895 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 348 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 54 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9145 KB; 2026-03-28 07:14:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 07:07:29, To:, 2026-03-28 07:14:27, Duration (s):, 418, Events Per Second:, 0.622, Events:, 260, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 259, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33594 2026-03-28 07:14:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 07:14:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 07:14:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 07:14:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 07:14:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s885ms. 2026-03-28 07:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 07:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9061 KB; 2026-03-28 07:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9055 KB; 2026-03-28 07:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9060 KB; 2026-03-28 07:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9069 KB; 2026-03-28 07:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9087 KB; 2026-03-28 07:19:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 07:19:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 07:19:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 07:19:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 07:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 07:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2754 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9128 KB; 2026-03-28 07:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2755 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9127 KB; 2026-03-28 07:21:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 07:15:01, To:, 2026-03-28 07:21:27, Duration (s):, 386, Events Per Second:, 0.249, Events:, 96, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 95, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14123 2026-03-28 07:21:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s707ms. 2026-03-28 07:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 759 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9046 KB; 2026-03-28 07:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2684 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9010 KB; 2026-03-28 07:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2687 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9015 KB; 2026-03-28 07:24:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 07:24:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 07:24:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 07:24:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 07:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 07:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 774 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9022 KB; 2026-03-28 07:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9111 KB; 2026-03-28 07:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9112 KB; 2026-03-28 07:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9113 KB; 2026-03-28 07:28:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 07:22:53, To:, 2026-03-28 07:28:27, Duration (s):, 334, Events Per Second:, 0.308, Events:, 103, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 102, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14754 2026-03-28 07:28:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s707ms. 2026-03-28 07:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9055 KB; 2026-03-28 07:29:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 07:29:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 07:29:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 07:29:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 07:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 07:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9112 KB; 2026-03-28 07:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2835 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9233 KB; 2026-03-28 07:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9164 KB; 2026-03-28 07:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2826 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9230 KB; 2026-03-28 07:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2827 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1822 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9235 KB; 2026-03-28 07:34:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 07:34:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 07:34:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 07:34:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 07:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 07:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2788 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 95 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9267 KB; 2026-03-28 07:35:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 07:28:35, To:, 2026-03-28 07:35:27, Duration (s):, 412, Events Per Second:, 0.362, Events:, 149, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 146, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20850 2026-03-28 07:35:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s754ms. 2026-03-28 07:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2749 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9108 KB; 2026-03-28 07:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 942 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; TcpIpConnectionsManager: 274 KB; CacheEntry: 273 KB; rules::ProcessConditionsCache: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 130 KB; BaseEvent: 73 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9568 KB; 2026-03-28 07:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1001 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; TcpIpConnectionsManager: 290 KB; CacheEntry: 273 KB; rules::ProcessConditionsCache: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 130 KB; BaseEvent: 99 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9731 KB; 2026-03-28 07:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1044 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 349 KB; TcpIpConnectionsManager: 274 KB; CacheEntry: 273 KB; rules::ProcessConditionsCache: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 130 KB; BaseEvent: 111 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9791 KB; 2026-03-28 07:39:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 07:39:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 07:39:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 07:39:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 07:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 07:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1051 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; rules::ProcessConditionsCache: 280 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 130 KB; BaseEvent: 113 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9732 KB; 2026-03-28 07:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1064 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; rules::ProcessConditionsCache: 300 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 130 KB; BaseEvent: 115 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9761 KB; 2026-03-28 07:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2686 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1064 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; rules::ProcessConditionsCache: 280 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 130 KB; BaseEvent: 117 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9706 KB; 2026-03-28 07:42:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 07:35:26, To:, 2026-03-28 07:42:27, Duration (s):, 421, Events Per Second:, 1.897, Events:, 799, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 707, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 91, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 95028 2026-03-28 07:42:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s481ms. 2026-03-28 07:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; rules::ProcessConditionsCache: 280 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9254 KB; 2026-03-28 07:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1898 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 349 KB; rules::ProcessConditionsCache: 304 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9325 KB; 2026-03-28 07:44:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 07:44:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 07:44:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 07:44:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 07:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 07:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; rules::ProcessConditionsCache: 316 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9361 KB; 2026-03-28 07:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 349 KB; rules::ProcessConditionsCache: 316 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9364 KB; 2026-03-28 07:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; rules::ProcessConditionsCache: 318 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9340 KB; 2026-03-28 07:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; rules::ProcessConditionsCache: 316 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9342 KB; 2026-03-28 07:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; rules::ProcessConditionsCache: 329 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9422 KB; 2026-03-28 07:49:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 07:43:50, To:, 2026-03-28 07:49:27, Duration (s):, 337, Events Per Second:, 0.451, Events:, 152, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 131, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21080 2026-03-28 07:49:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s726ms. 2026-03-28 07:49:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 07:49:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 07:49:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 07:49:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 07:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 07:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; rules::ProcessConditionsCache: 323 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9362 KB; 2026-03-28 07:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2759 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9241 KB; 2026-03-28 07:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9116 KB; 2026-03-28 07:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9115 KB; 2026-03-28 07:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9222 KB; 2026-03-28 07:54:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 07:54:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 07:54:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 07:54:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 07:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 07:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9183 KB; 2026-03-28 07:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 868 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 37 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9209 KB; 2026-03-28 07:56:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 07:49:29, To:, 2026-03-28 07:56:27, Duration (s):, 418, Events Per Second:, 0.574, Events:, 240, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 239, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30454 2026-03-28 07:56:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s729ms. 2026-03-28 07:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9065 KB; 2026-03-28 07:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9208 KB; 2026-03-28 07:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9137 KB; 2026-03-28 07:59:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 07:59:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 07:59:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 07:59:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 07:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 07:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 07:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9207 KB; 2026-03-28 08:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9210 KB; 2026-03-28 08:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 869 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9180 KB; 2026-03-28 08:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9198 KB; 2026-03-28 08:03:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 07:56:18, To:, 2026-03-28 08:03:27, Duration (s):, 429, Events Per Second:, 0.583, Events:, 250, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 209, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 20, Livegrid:, 20, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31450 2026-03-28 08:03:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s673ms. 2026-03-28 08:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 759 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9037 KB; 2026-03-28 08:04:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 08:04:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 08:04:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 08:04:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 08:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 08:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 759 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9037 KB; 2026-03-28 08:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 759 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9036 KB; 2026-03-28 08:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 759 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9036 KB; 2026-03-28 08:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9069 KB; 2026-03-28 08:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 93 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9281 KB; 2026-03-28 08:09:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 08:09:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 08:09:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 08:09:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 08:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 08:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 93 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9288 KB; 2026-03-28 08:10:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 08:03:21, To:, 2026-03-28 08:10:27, Duration (s):, 426, Events Per Second:, 0.767, Events:, 327, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 326, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41723 2026-03-28 08:10:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s867ms. 2026-03-28 08:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 91 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9251 KB; 2026-03-28 08:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 91 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9183 KB; 2026-03-28 08:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9208 KB; 2026-03-28 08:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1900 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 129 KB; rules::ProcessConditionsCache: 93 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9211 KB; 2026-03-28 08:14:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 08:14:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 08:14:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 08:14:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 08:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 08:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1903 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 906 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9239 KB; 2026-03-28 08:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 1903 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 928 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 117 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9318 KB; 2026-03-28 08:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1903 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 954 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 275 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 113 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9366 KB; 2026-03-28 08:17:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 08:10:32, To:, 2026-03-28 08:17:27, Duration (s):, 415, Events Per Second:, 0.462, Events:, 192, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 191, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25403 2026-03-28 08:17:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s688ms. 2026-03-28 08:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1903 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 868 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 275 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9374 KB; 2026-03-28 08:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1903 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; TcpIpConnectionsManager: 275 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9455 KB; 2026-03-28 08:19:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 08:19:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 08:19:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 08:19:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 08:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 08:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1903 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 931 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 350 KB; CacheEntry: 275 KB; TcpIpConnectionsManager: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 152 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9463 KB; 2026-03-28 08:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1903 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 959 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; TcpIpConnectionsManager: 285 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; rules::ProcessConditionsCache: 141 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9501 KB; 2026-03-28 08:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 1903 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1023 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; TcpIpConnectionsManager: 290 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 130 KB; BaseEvent: 69 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9628 KB; 2026-03-28 08:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1904 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1070 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 350 KB; CacheEntry: 275 KB; TcpIpConnectionsManager: 266 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 131 KB; BaseEvent: 97 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9741 KB; 2026-03-28 08:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1904 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1078 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 238 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 131 KB; BaseEvent: 102 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9726 KB; 2026-03-28 08:24:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 08:17:26, To:, 2026-03-28 08:24:27, Duration (s):, 421, Events Per Second:, 1.662, Events:, 700, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 640, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 55, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 81899 2026-03-28 08:24:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s792ms. 2026-03-28 08:24:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 08:24:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 08:24:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 08:24:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 08:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 08:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 1904 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 931 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; rules::ProcessConditionsCache: 313 KB; CacheEntry: 275 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9557 KB; 2026-03-28 08:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 1904 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 931 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 239 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9455 KB; 2026-03-28 08:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1904 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 932 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 350 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 271 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9494 KB; 2026-03-28 08:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1904 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 932 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 350 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9476 KB; 2026-03-28 08:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1904 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 350 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9465 KB; 2026-03-28 08:29:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 08:29:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 08:29:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 08:29:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 08:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 08:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 282 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9520 KB; 2026-03-28 08:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 284 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9529 KB; 2026-03-28 08:31:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 08:24:26, To:, 2026-03-28 08:31:27, Duration (s):, 421, Events Per Second:, 0.639, Events:, 269, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 192, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 37, Livegrid:, 37, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32303 2026-03-28 08:31:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s146ms. 2026-03-28 08:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 285 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9304 KB; 2026-03-28 08:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 316 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9441 KB; 2026-03-28 08:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 316 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 130 KB; BaseEvent: 51 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9487 KB; 2026-03-28 08:34:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 08:34:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 08:34:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 08:34:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 08:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 08:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 311 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 130 KB; BaseEvent: 51 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9485 KB; 2026-03-28 08:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 311 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 130 KB; BaseEvent: 52 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9471 KB; 2026-03-28 08:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 311 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 130 KB; BaseEvent: 54 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9448 KB; 2026-03-28 08:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 311 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 130 KB; BaseEvent: 54 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9451 KB; 2026-03-28 08:38:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 08:31:37, To:, 2026-03-28 08:38:27, Duration (s):, 410, Events Per Second:, 0.712, Events:, 292, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 162, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 59, Livegrid:, 59, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32495 2026-03-28 08:38:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s636ms. 2026-03-28 08:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 316 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9413 KB; 2026-03-28 08:39:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 08:39:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 08:39:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 08:39:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 08:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 08:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 316 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9418 KB; 2026-03-28 08:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 324 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9438 KB; 2026-03-28 08:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 322 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9460 KB; 2026-03-28 08:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 395 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 130 KB; BaseEvent: 68 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9642 KB; 2026-03-28 08:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1072 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; TcpIpConnectionsManager: 297 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 195 KB; BaseEvent: 167 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9852 KB; 2026-03-28 08:44:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 08:44:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 08:44:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 08:44:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 08:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 08:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1148 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; TcpIpConnectionsManager: 325 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; BaseEvent: 205 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 56 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10085 KB; 2026-03-28 08:45:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 08:39:01, To:, 2026-03-28 08:45:27, Duration (s):, 386, Events Per Second:, 3.050, Events:, 1178, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 904, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 61, Livegrid:, 61, OriginUrl:, 0, Alarms:, 151, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 133266 2026-03-28 08:45:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s979ms. 2026-03-28 08:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2757 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1098 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; TcpIpConnectionsManager: 298 KB; rules::ProcessConditionsCache: 276 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9786 KB; 2026-03-28 08:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2758 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1098 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 276 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9688 KB; 2026-03-28 08:48:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2759 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1098 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 276 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9662 KB; 2026-03-28 08:49:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2761 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1103 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 289 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9691 KB; 2026-03-28 08:49:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 08:49:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 08:49:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 08:49:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 08:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 08:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:50:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1108 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 289 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9676 KB; 2026-03-28 08:51:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1142 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 341 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9785 KB; 2026-03-28 08:52:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1152 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 291 KB; CacheEntry: 275 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9740 KB; 2026-03-28 08:52:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 08:49:04, To:, 2026-03-28 08:52:27, Duration (s):, 203, Events Per Second:, 0.723, Events:, 147, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 146, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19630 2026-03-28 08:52:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s629ms. 2026-03-28 08:53:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 292 KB; CacheEntry: 275 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9402 KB; 2026-03-28 08:54:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 292 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9374 KB; 2026-03-28 08:54:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 08:54:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 08:54:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 08:54:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 08:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 08:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:55:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 294 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9355 KB; 2026-03-28 08:56:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 321 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9437 KB; 2026-03-28 08:57:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 292 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9382 KB; 2026-03-28 08:58:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 292 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9386 KB; 2026-03-28 08:59:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 1910 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 292 KB; CacheEntry: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9378 KB; 2026-03-28 08:59:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 08:53:21, To:, 2026-03-28 08:59:27, Duration (s):, 366, Events Per Second:, 0.229, Events:, 84, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 83, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12762 2026-03-28 08:59:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s696ms. 2026-03-28 08:59:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 08:59:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 08:59:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 08:59:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 08:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 08:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 08:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:00:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 303 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9309 KB; 2026-03-28 09:01:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9477 KB; 2026-03-28 09:02:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9465 KB; 2026-03-28 09:03:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9469 KB; 2026-03-28 09:04:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9484 KB; 2026-03-28 09:04:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 09:04:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 09:04:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 09:04:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 09:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 09:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:05:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 355 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9502 KB; 2026-03-28 09:06:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 355 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 130 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9509 KB; 2026-03-28 09:06:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 09:00:00, To:, 2026-03-28 09:06:27, Duration (s):, 387, Events Per Second:, 0.901, Events:, 349, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 286, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 31, Livegrid:, 31, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42612 2026-03-28 09:06:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s835ms. 2026-03-28 09:07:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 358 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9383 KB; 2026-03-28 09:08:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 391 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9469 KB; 2026-03-28 09:09:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1026 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; TcpIpConnectionsManager: 297 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 131 KB; BaseEvent: 112 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9716 KB; 2026-03-28 09:09:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 09:09:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 09:09:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 09:09:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 09:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 09:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:10:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1067 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; TcpIpConnectionsManager: 284 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 131 KB; BaseEvent: 121 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9771 KB; 2026-03-28 09:11:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1073 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 131 KB; BaseEvent: 123 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9800 KB; 2026-03-28 09:12:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1073 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 208 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 131 KB; BaseEvent: 126 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9692 KB; 2026-03-28 09:13:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1075 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 212 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 131 KB; BaseEvent: 124 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9699 KB; 2026-03-28 09:13:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 09:06:36, To:, 2026-03-28 09:13:27, Duration (s):, 411, Events Per Second:, 1.977, Events:, 813, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 710, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 102, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 94616 2026-03-28 09:13:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s779ms. 2026-03-28 09:14:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 763 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 217 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9224 KB; 2026-03-28 09:14:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 09:14:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 09:14:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 09:14:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 09:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 09:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:15:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 217 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9231 KB; 2026-03-28 09:16:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 309 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9430 KB; 2026-03-28 09:17:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 221 KB; rules::ProcessConditionsCache: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9330 KB; 2026-03-28 09:18:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 221 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9331 KB; 2026-03-28 09:19:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 219 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9314 KB; 2026-03-28 09:19:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 09:19:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 09:19:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 09:19:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 09:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 09:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:20:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9299 KB; 2026-03-28 09:20:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 09:14:49, To:, 2026-03-28 09:20:27, Duration (s):, 338, Events Per Second:, 0.470, Events:, 159, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 156, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20803 2026-03-28 09:20:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s655ms. 2026-03-28 09:21:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 268 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9313 KB; 2026-03-28 09:22:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9264 KB; 2026-03-28 09:23:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9274 KB; 2026-03-28 09:24:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9272 KB; 2026-03-28 09:24:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 09:24:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 09:24:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 09:24:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 09:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 09:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:25:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9353 KB; 2026-03-28 09:26:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9305 KB; 2026-03-28 09:27:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9330 KB; 2026-03-28 09:27:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 09:21:05, To:, 2026-03-28 09:27:27, Duration (s):, 382, Events Per Second:, 0.395, Events:, 151, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 150, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20362 2026-03-28 09:27:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s686ms. 2026-03-28 09:28:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9277 KB; 2026-03-28 09:29:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1912 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9258 KB; 2026-03-28 09:29:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 09:29:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 09:29:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 09:29:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 09:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 09:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:30:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 1914 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9284 KB; 2026-03-28 09:31:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1914 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 47 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9277 KB; 2026-03-28 09:32:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1914 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9271 KB; 2026-03-28 09:33:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 1914 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9272 KB; 2026-03-28 09:34:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1914 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 935 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 352 KB; TcpIpConnectionsManager: 297 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; rules::ProcessConditionsCache: 137 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9483 KB; 2026-03-28 09:34:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 09:27:28, To:, 2026-03-28 09:34:27, Duration (s):, 419, Events Per Second:, 0.882, Events:, 370, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 369, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47397 2026-03-28 09:34:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s859ms. 2026-03-28 09:34:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 09:34:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 09:34:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 09:34:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 09:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 09:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:35:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1915 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 885 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9265 KB; 2026-03-28 09:36:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1915 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9272 KB; 2026-03-28 09:37:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1917 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 353 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9280 KB; 2026-03-28 09:38:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1918 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 353 KB; CacheEntry: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 45 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9263 KB; 2026-03-28 09:39:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2746 KB; ModuleMetadata: 1920 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1064 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 353 KB; CacheEntry: 277 KB; TcpIpConnectionsManager: 261 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; cloudutils::CloudData: 133 KB; BaseEvent: 73 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9825 KB; 2026-03-28 09:39:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 09:39:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 09:39:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 09:39:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 09:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 09:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:40:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 1920 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1092 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 353 KB; CacheEntry: 277 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 155 KB; cloudutils::CloudData: 133 KB; BaseEvent: 89 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9730 KB; 2026-03-28 09:41:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 1920 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1177 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 353 KB; TcpIpConnectionsManager: 305 KB; CacheEntry: 277 KB; rules::ProcessConditionsCache: 229 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 133 KB; BaseEvent: 128 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9961 KB; 2026-03-28 09:41:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 09:34:27, To:, 2026-03-28 09:41:27, Duration (s):, 420, Events Per Second:, 2.099, Events:, 882, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 787, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 8, Livegrid:, 8, OriginUrl:, 0, Alarms:, 78, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 106367 2026-03-28 09:41:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s965ms. 2026-03-28 09:42:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1920 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1044 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 353 KB; TcpIpConnectionsManager: 284 KB; CacheEntry: 277 KB; rules::ProcessConditionsCache: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 133 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9634 KB; 2026-03-28 09:43:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 1920 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1066 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 353 KB; CacheEntry: 277 KB; rules::ProcessConditionsCache: 274 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 133 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9688 KB; 2026-03-28 09:44:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 1920 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1088 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 353 KB; CacheEntry: 277 KB; rules::ProcessConditionsCache: 247 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 133 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9655 KB; 2026-03-28 09:44:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 09:44:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 09:44:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 09:44:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 09:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 09:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:45:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1968 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1125 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 326 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9892 KB; 2026-03-28 09:46:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1968 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1147 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 276 KB; TcpIpConnectionsManager: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9883 KB; 2026-03-28 09:47:22 796740bfb6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1968 KB; rules::RuleEvaluationCtx: 1826 KB; ProcessInfo: 1147 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 239 KB; rules::ProcessConditionsCache: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9812 KB; 2026-03-28 09:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3362 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1339 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; TcpIpConnectionsManager: 310 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 136 KB; BaseEvent: 127 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11514 KB; 2026-03-28 09:48:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 09:41:39, To:, 2026-03-28 09:48:27, Duration (s):, 408, Events Per Second:, 2.045, Events:, 835, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 744, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 90, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 95998 2026-03-28 09:48:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s834ms. 2026-03-28 09:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3362 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1023 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; TcpIpConnectionsManager: 290 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11045 KB; 2026-03-28 09:49:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 09:49:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 09:49:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 09:49:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 09:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 09:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3362 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1028 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11056 KB; 2026-03-28 09:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3362 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1029 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10979 KB; 2026-03-28 09:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3362 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1029 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10947 KB; 2026-03-28 09:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3362 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1038 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11009 KB; 2026-03-28 09:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3362 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1039 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11010 KB; 2026-03-28 09:54:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 09:54:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 09:54:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 09:54:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 09:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 09:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3362 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1047 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11034 KB; 2026-03-28 09:55:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 09:48:32, To:, 2026-03-28 09:55:27, Duration (s):, 415, Events Per Second:, 0.272, Events:, 113, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 112, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16525 2026-03-28 09:55:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s695ms. 2026-03-28 09:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 1968 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 218 KB; rules::ProcessConditionsCache: 153 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11031 KB; 2026-03-28 09:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 1968 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 83 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10930 KB; 2026-03-28 09:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 1968 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10935 KB; 2026-03-28 09:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2747 KB; ModuleMetadata: 1968 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10984 KB; 2026-03-28 09:59:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 09:59:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 09:59:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 09:59:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 09:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 09:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 09:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 1968 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10962 KB; 2026-03-28 10:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2748 KB; ModuleMetadata: 1968 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10997 KB; 2026-03-28 10:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1968 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10927 KB; 2026-03-28 10:02:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 09:55:45, To:, 2026-03-28 10:02:27, Duration (s):, 402, Events Per Second:, 0.440, Events:, 177, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 176, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24868 2026-03-28 10:02:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s632ms. 2026-03-28 10:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 1968 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10856 KB; 2026-03-28 10:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 1968 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10881 KB; 2026-03-28 10:04:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 10:04:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 10:04:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 10:04:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 10:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 10:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1968 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10882 KB; 2026-03-28 10:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1968 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10889 KB; 2026-03-28 10:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1968 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10880 KB; 2026-03-28 10:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 1968 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 213 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11086 KB; 2026-03-28 10:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1968 KB; ProcessInfo: 900 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 60 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11098 KB; 2026-03-28 10:09:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 10:03:10, To:, 2026-03-28 10:09:27, Duration (s):, 377, Events Per Second:, 0.800, Events:, 302, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 301, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38639 2026-03-28 10:09:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s641ms. 2026-03-28 10:09:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 10:09:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 10:09:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 10:09:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 10:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 10:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 1968 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 11018 KB; 2026-03-28 10:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 1968 KB; ProcessInfo: 885 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11055 KB; 2026-03-28 10:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 1968 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 91 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11026 KB; 2026-03-28 10:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 1968 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11060 KB; 2026-03-28 10:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 1968 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11039 KB; 2026-03-28 10:14:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 10:14:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 10:14:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 10:14:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 10:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 10:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 1968 KB; ProcessInfo: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 93 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11060 KB; 2026-03-28 10:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1968 KB; ProcessInfo: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 93 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11040 KB; 2026-03-28 10:16:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 10:09:26, To:, 2026-03-28 10:16:27, Duration (s):, 421, Events Per Second:, 0.387, Events:, 163, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 145, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22226 2026-03-28 10:16:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s866ms. 2026-03-28 10:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1968 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10848 KB; 2026-03-28 10:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 1968 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10847 KB; 2026-03-28 10:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1968 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 99 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10843 KB; 2026-03-28 10:19:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 10:19:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 10:19:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 10:19:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 10:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 10:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1968 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10858 KB; 2026-03-28 10:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 1968 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10865 KB; 2026-03-28 10:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1968 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10868 KB; 2026-03-28 10:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1968 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10927 KB; 2026-03-28 10:23:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 10:17:01, To:, 2026-03-28 10:23:27, Duration (s):, 386, Events Per Second:, 0.362, Events:, 140, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 139, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19120 2026-03-28 10:23:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s625ms. 2026-03-28 10:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 1968 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10927 KB; 2026-03-28 10:24:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 10:24:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 10:24:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 10:24:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 10:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 10:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 1968 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 110 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10940 KB; 2026-03-28 10:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 1968 KB; ProcessInfo: 947 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 275 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 135 KB; BaseEvent: 63 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11350 KB; 2026-03-28 10:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1968 KB; ProcessInfo: 997 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 281 KB; TcpIpConnectionsManager: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 135 KB; BaseEvent: 89 KB; ProcessInfoCommandLineTag: 45 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 11451 KB; 2026-03-28 10:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1004 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 291 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 135 KB; BaseEvent: 92 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11476 KB; 2026-03-28 10:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1007 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 299 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 135 KB; BaseEvent: 93 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11434 KB; 2026-03-28 10:29:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 10:29:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 10:29:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 10:29:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 10:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 10:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1036 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 306 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 135 KB; BaseEvent: 101 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11457 KB; 2026-03-28 10:30:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 10:23:55, To:, 2026-03-28 10:30:27, Duration (s):, 392, Events Per Second:, 1.664, Events:, 653, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 568, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 78, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 77154 2026-03-28 10:30:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s773ms. 2026-03-28 10:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1968 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 305 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11088 KB; 2026-03-28 10:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 1968 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 302 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11074 KB; 2026-03-28 10:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1968 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 385 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11233 KB; 2026-03-28 10:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 1968 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 381 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11301 KB; 2026-03-28 10:34:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 10:34:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 10:34:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 10:34:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 10:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 10:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1968 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 335 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11302 KB; 2026-03-28 10:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 1968 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 319 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11307 KB; 2026-03-28 10:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1968 KB; ProcessInfo: 942 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 381 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11452 KB; 2026-03-28 10:37:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 10:31:44, To:, 2026-03-28 10:37:27, Duration (s):, 343, Events Per Second:, 1.086, Events:, 373, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 372, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46537 2026-03-28 10:37:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s847ms. 2026-03-28 10:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1968 KB; ProcessInfo: 868 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 334 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11255 KB; 2026-03-28 10:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1968 KB; ProcessInfo: 922 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 316 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11314 KB; 2026-03-28 10:39:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 10:39:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 10:39:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 10:39:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 10:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 10:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1968 KB; ProcessInfo: 928 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 318 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11319 KB; 2026-03-28 10:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1968 KB; ProcessInfo: 963 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 366 KB; ModuleInfoCache: 359 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11429 KB; 2026-03-28 10:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 1968 KB; ProcessInfo: 967 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 320 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11338 KB; 2026-03-28 10:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 1968 KB; ProcessInfo: 967 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 318 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11379 KB; 2026-03-28 10:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 1968 KB; ProcessInfo: 967 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 318 KB; CacheEntry: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11363 KB; 2026-03-28 10:44:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 10:37:27, To:, 2026-03-28 10:44:27, Duration (s):, 420, Events Per Second:, 0.778, Events:, 327, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 326, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43593 2026-03-28 10:44:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s796ms. 2026-03-28 10:44:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 10:44:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 10:44:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 10:44:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 10:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 10:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1973 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 321 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11107 KB; 2026-03-28 10:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1973 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 321 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11112 KB; 2026-03-28 10:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 1973 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 325 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11188 KB; 2026-03-28 10:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 1973 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 323 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11204 KB; 2026-03-28 10:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1973 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11033 KB; 2026-03-28 10:49:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 10:49:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 10:49:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 10:49:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 10:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 10:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 1973 KB; ProcessInfo: 906 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11084 KB; 2026-03-28 10:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 1973 KB; ProcessInfo: 906 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 46 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11085 KB; 2026-03-28 10:51:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 10:44:34, To:, 2026-03-28 10:51:27, Duration (s):, 413, Events Per Second:, 0.854, Events:, 353, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 350, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42712 2026-03-28 10:51:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s780ms. 2026-03-28 10:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 1973 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10999 KB; 2026-03-28 10:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 1973 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10947 KB; 2026-03-28 10:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1973 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10949 KB; 2026-03-28 10:54:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 10:54:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 10:54:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 10:54:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 10:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 10:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 1973 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10959 KB; 2026-03-28 10:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1044 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 135 KB; BaseEvent: 95 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11407 KB; 2026-03-28 10:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1261 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; TcpIpConnectionsManager: 358 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; BaseEvent: 191 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 98 KB; BatchSerializer::EventsQueueTag: 55 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11769 KB; 2026-03-28 10:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1270 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 361 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; BaseEvent: 196 KB; cloudutils::CloudData: 135 KB; BatchSerializer::EventsQueueTag: 58 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11705 KB; 2026-03-28 10:58:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 10:51:37, To:, 2026-03-28 10:58:27, Duration (s):, 410, Events Per Second:, 2.924, Events:, 1200, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1034, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 163, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 136780 2026-03-28 10:58:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s997ms. 2026-03-28 10:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3490 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1148 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; TcpIpConnectionsManager: 295 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11272 KB; 2026-03-28 10:59:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 10:59:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 10:59:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 10:59:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 10:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 10:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 10:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1210 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11452 KB; 2026-03-28 11:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1211 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11323 KB; 2026-03-28 11:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1211 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 49 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11323 KB; 2026-03-28 11:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1211 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 49 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11313 KB; 2026-03-28 11:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1216 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 135 KB; ProcessInfoCommandLineTag: 49 KB; rules::ProcessConditionsCache: 47 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11285 KB; 2026-03-28 11:04:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 11:04:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 11:04:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 11:04:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 11:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 11:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1242 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11414 KB; 2026-03-28 11:05:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 10:58:27, To:, 2026-03-28 11:05:27, Duration (s):, 420, Events Per Second:, 0.595, Events:, 250, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 247, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33506 2026-03-28 11:05:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s690ms. 2026-03-28 11:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1973 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10822 KB; 2026-03-28 11:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 1973 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10822 KB; 2026-03-28 11:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1973 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10825 KB; 2026-03-28 11:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 1973 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10881 KB; 2026-03-28 11:09:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 11:09:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 11:09:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 11:09:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 11:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 11:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 1973 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10913 KB; 2026-03-28 11:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 1973 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10921 KB; 2026-03-28 11:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3493 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1973 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 113 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10994 KB; 2026-03-28 11:12:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 11:05:26, To:, 2026-03-28 11:12:27, Duration (s):, 421, Events Per Second:, 0.489, Events:, 206, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 205, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30417 2026-03-28 11:12:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s665ms. 2026-03-28 11:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1007 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 359 KB; rules::ProcessConditionsCache: 300 KB; TcpIpConnectionsManager: 285 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 135 KB; BaseEvent: 107 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11654 KB; 2026-03-28 11:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1245 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 422 KB; ModuleInfoCache: 359 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; BaseEvent: 213 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 135 KB; BatchSerializer::EventsQueueTag: 56 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 20 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12096 KB; 2026-03-28 11:14:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 11:14:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 11:14:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 11:14:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 11:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 11:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 1976 KB; ProcessInfo: 1249 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 416 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; BaseEvent: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; rules::ProcessConditionsCache: 138 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 59 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12011 KB; 2026-03-28 11:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 1976 KB; ProcessInfo: 1271 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; TcpIpConnectionsManager: 331 KB; CacheEntry: 285 KB; BaseEvent: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; rules::ProcessConditionsCache: 140 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 62 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11982 KB; 2026-03-28 11:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 1976 KB; ProcessInfo: 1320 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 263 KB; rules::ProcessConditionsCache: 248 KB; BaseEvent: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 66 KB; ProcessInfoCommandLineTag: 46 KB; ExtendedTcpIpConnectionInfo: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12099 KB; 2026-03-28 11:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 1976 KB; ProcessInfo: 1320 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 244 KB; BaseEvent: 240 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 149 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 70 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11950 KB; 2026-03-28 11:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 1976 KB; ProcessInfo: 1323 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; BaseEvent: 242 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 140 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 71 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11946 KB; 2026-03-28 11:19:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 11:12:27, To:, 2026-03-28 11:19:27, Duration (s):, 420, Events Per Second:, 3.518, Events:, 1479, File:, 5, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1270, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 203, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 167977 2026-03-28 11:19:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s953ms. 2026-03-28 11:19:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 11:19:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 11:19:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 11:19:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 11:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 11:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 1976 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; rules::ProcessConditionsCache: 150 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11133 KB; 2026-03-28 11:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 1976 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; rules::ProcessConditionsCache: 207 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11205 KB; 2026-03-28 11:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1976 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 192 KB; rules::ProcessConditionsCache: 155 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11112 KB; 2026-03-28 11:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1976 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; rules::ProcessConditionsCache: 254 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11346 KB; 2026-03-28 11:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 1976 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 153 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11218 KB; 2026-03-28 11:24:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 11:24:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 11:24:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 11:24:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 11:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 11:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1976 KB; ProcessInfo: 885 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 155 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11211 KB; 2026-03-28 11:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 1976 KB; ProcessInfo: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11310 KB; 2026-03-28 11:26:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 11:20:02, To:, 2026-03-28 11:26:27, Duration (s):, 385, Events Per Second:, 0.763, Events:, 294, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 293, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37145 2026-03-28 11:26:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s641ms. 2026-03-28 11:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1976 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 155 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11122 KB; 2026-03-28 11:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 1976 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11292 KB; 2026-03-28 11:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1976 KB; ProcessInfo: 885 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11243 KB; 2026-03-28 11:29:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 11:29:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 11:29:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 11:29:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 11:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 11:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 1978 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11250 KB; 2026-03-28 11:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 1978 KB; ProcessInfo: 932 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11350 KB; 2026-03-28 11:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 1978 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 213 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11303 KB; 2026-03-28 11:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 1978 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11305 KB; 2026-03-28 11:33:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 11:26:26, To:, 2026-03-28 11:33:27, Duration (s):, 421, Events Per Second:, 0.705, Events:, 297, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 296, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37557 2026-03-28 11:33:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s634ms. 2026-03-28 11:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 1978 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 184 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11103 KB; 2026-03-28 11:34:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 11:34:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 11:34:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 11:34:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 11:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 11:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 1978 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 173 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11107 KB; 2026-03-28 11:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 1978 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 187 KB; rules::ProcessConditionsCache: 173 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11113 KB; 2026-03-28 11:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 1978 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 190 KB; rules::ProcessConditionsCache: 175 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11124 KB; 2026-03-28 11:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 1978 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 187 KB; rules::ProcessConditionsCache: 173 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11124 KB; 2026-03-28 11:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 1978 KB; ProcessInfo: 868 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; rules::ProcessConditionsCache: 184 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11199 KB; 2026-03-28 11:39:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 11:39:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 11:39:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 11:39:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 11:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 11:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 1978 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 180 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11248 KB; 2026-03-28 11:40:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 11:34:06, To:, 2026-03-28 11:40:27, Duration (s):, 381, Events Per Second:, 0.621, Events:, 237, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 231, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31482 2026-03-28 11:40:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s692ms. 2026-03-28 11:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 1978 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11194 KB; 2026-03-28 11:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2685 KB; ModuleMetadata: 1978 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11239 KB; 2026-03-28 11:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 1978 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11283 KB; 2026-03-28 11:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 1978 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 360 KB; CacheEntry: 285 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 136 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11252 KB; 2026-03-28 11:44:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 11:44:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 11:44:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 11:44:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 11:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 11:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 2170 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 193 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11497 KB; 2026-03-28 11:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2170 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 185 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11476 KB; 2026-03-28 11:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2170 KB; ProcessInfo: 969 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; rules::ProcessConditionsCache: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 149 KB; BaseEvent: 56 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11701 KB; 2026-03-28 11:47:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 11:40:27, To:, 2026-03-28 11:47:27, Duration (s):, 420, Events Per Second:, 1.139, Events:, 479, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 433, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 45, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57536 2026-03-28 11:47:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s826ms. 2026-03-28 11:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2170 KB; ProcessInfo: 904 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; rules::ProcessConditionsCache: 341 KB; CacheEntry: 312 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11695 KB; 2026-03-28 11:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1129 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; TcpIpConnectionsManager: 330 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 149 KB; BaseEvent: 130 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12015 KB; 2026-03-28 11:49:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 11:49:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 11:49:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 11:49:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 11:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 11:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1283 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; rules::ProcessConditionsCache: 374 KB; TcpIpConnectionsManager: 364 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; BaseEvent: 204 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 54 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12483 KB; 2026-03-28 11:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1283 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; rules::ProcessConditionsCache: 365 KB; TcpIpConnectionsManager: 333 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; BaseEvent: 205 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 54 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12439 KB; 2026-03-28 11:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2687 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1286 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; rules::ProcessConditionsCache: 367 KB; CacheEntry: 312 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; BaseEvent: 206 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 55 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12348 KB; 2026-03-28 11:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2687 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1289 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; rules::ProcessConditionsCache: 369 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; BaseEvent: 209 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 55 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12283 KB; 2026-03-28 11:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1311 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; rules::ProcessConditionsCache: 369 KB; CacheEntry: 312 KB; BaseEvent: 214 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 59 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12331 KB; 2026-03-28 11:54:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 11:47:28, To:, 2026-03-28 11:54:27, Duration (s):, 419, Events Per Second:, 2.949, Events:, 1237, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1038, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 198, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 140819 2026-03-28 11:54:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s069ms. 2026-03-28 11:54:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 11:54:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 11:54:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 11:54:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 11:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 11:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 2170 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11337 KB; 2026-03-28 11:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 2170 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11312 KB; 2026-03-28 11:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2170 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11295 KB; 2026-03-28 11:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2170 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11281 KB; 2026-03-28 11:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2170 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11255 KB; 2026-03-28 11:59:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 11:59:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 11:59:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 11:59:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 11:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 11:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 11:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2170 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11317 KB; 2026-03-28 12:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2170 KB; ProcessInfo: 945 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11499 KB; 2026-03-28 12:01:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 11:54:31, To:, 2026-03-28 12:01:27, Duration (s):, 416, Events Per Second:, 0.991, Events:, 413, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 412, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53053 2026-03-28 12:01:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s909ms. 2026-03-28 12:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 2170 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 117 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11373 KB; 2026-03-28 12:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2170 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11381 KB; 2026-03-28 12:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2170 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11378 KB; 2026-03-28 12:04:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 12:04:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 12:04:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 12:04:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 12:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 12:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2170 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 126 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11444 KB; 2026-03-28 12:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2170 KB; ProcessInfo: 953 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11616 KB; 2026-03-28 12:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2170 KB; ProcessInfo: 953 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11618 KB; 2026-03-28 12:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2170 KB; ProcessInfo: 953 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11598 KB; 2026-03-28 12:08:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 12:01:23, To:, 2026-03-28 12:08:27, Duration (s):, 424, Events Per Second:, 0.678, Events:, 288, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 219, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 34, Livegrid:, 34, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36163 2026-03-28 12:08:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s718ms. 2026-03-28 12:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2170 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 185 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11355 KB; 2026-03-28 12:09:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 12:09:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 12:09:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 12:09:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 12:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 12:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2170 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 185 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11355 KB; 2026-03-28 12:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2170 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 141 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11366 KB; 2026-03-28 12:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 2170 KB; ProcessInfo: 956 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11646 KB; 2026-03-28 12:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1003 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 385 KB; TcpIpConnectionsManager: 321 KB; CacheEntry: 312 KB; rules::ProcessConditionsCache: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11839 KB; 2026-03-28 12:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1009 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; TcpIpConnectionsManager: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 158 KB; cloudutils::CloudData: 149 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11730 KB; 2026-03-28 12:14:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 12:14:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 12:14:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 12:14:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 12:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 12:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1056 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 305 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 53 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11857 KB; 2026-03-28 12:15:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 12:06:11, To:, 2026-03-28 12:15:27, Duration (s):, 556, Events Per Second:, 1.211, Events:, 674, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 669, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 83126 2026-03-28 12:15:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s926ms. 2026-03-28 12:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2190 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 158 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11541 KB; 2026-03-28 12:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2190 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 151 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11501 KB; 2026-03-28 12:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2190 KB; ProcessInfo: 942 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 263 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11704 KB; 2026-03-28 12:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2190 KB; ProcessInfo: 948 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; rules::ProcessConditionsCache: 158 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11608 KB; 2026-03-28 12:19:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 12:19:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 12:19:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 12:19:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 12:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 12:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2190 KB; ProcessInfo: 959 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11617 KB; 2026-03-28 12:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2190 KB; ProcessInfo: 982 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11712 KB; 2026-03-28 12:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1014 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11730 KB; 2026-03-28 12:22:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 12:15:27, To:, 2026-03-28 12:22:27, Duration (s):, 420, Events Per Second:, 0.827, Events:, 348, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 347, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44191 2026-03-28 12:22:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s697ms. 2026-03-28 12:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2190 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 277 KB; rules::ProcessConditionsCache: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11629 KB; 2026-03-28 12:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1020 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; TcpIpConnectionsManager: 336 KB; rules::ProcessConditionsCache: 332 KB; CacheEntry: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 150 KB; BaseEvent: 80 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12008 KB; 2026-03-28 12:24:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 12:24:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 12:24:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 12:24:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 12:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 12:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1239 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 405 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; rules::ProcessConditionsCache: 191 KB; BaseEvent: 182 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 52 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12280 KB; 2026-03-28 12:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1263 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 408 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; BaseEvent: 188 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 55 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12410 KB; 2026-03-28 12:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1274 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; TcpIpConnectionsManager: 318 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; BaseEvent: 197 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 59 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12301 KB; 2026-03-28 12:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1274 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 207 KB; BaseEvent: 201 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 61 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12177 KB; 2026-03-28 12:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1276 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; BaseEvent: 201 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 61 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12186 KB; 2026-03-28 12:29:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 12:22:27, To:, 2026-03-28 12:29:27, Duration (s):, 420, Events Per Second:, 2.985, Events:, 1256, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1088, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 161, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 144787 2026-03-28 12:29:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s864ms. 2026-03-28 12:29:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 12:29:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 12:29:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 12:29:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 12:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 12:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2190 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11519 KB; 2026-03-28 12:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2190 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 234 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11552 KB; 2026-03-28 12:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2190 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 256 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11637 KB; 2026-03-28 12:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2190 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 234 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11579 KB; 2026-03-28 12:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2190 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11591 KB; 2026-03-28 12:34:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 12:34:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 12:34:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 12:34:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 12:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 12:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2190 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 243 KB; TcpIpConnectionsManager: 213 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11638 KB; 2026-03-28 12:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2190 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 150 KB; BaseEvent: 49 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11630 KB; 2026-03-28 12:36:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 12:29:25, To:, 2026-03-28 12:36:27, Duration (s):, 422, Events Per Second:, 0.849, Events:, 359, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 288, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 35, Livegrid:, 35, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43503 2026-03-28 12:36:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s837ms. 2026-03-28 12:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2190 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11447 KB; 2026-03-28 12:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2190 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11428 KB; 2026-03-28 12:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2190 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 150 KB; BaseEvent: 62 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11565 KB; 2026-03-28 12:39:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 12:39:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 12:39:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 12:39:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 12:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 12:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2190 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 304 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 150 KB; BaseEvent: 71 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11745 KB; 2026-03-28 12:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2190 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 249 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 150 KB; BaseEvent: 75 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11704 KB; 2026-03-28 12:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2190 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 249 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 150 KB; BaseEvent: 75 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11707 KB; 2026-03-28 12:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2190 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 150 KB; BaseEvent: 76 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11671 KB; 2026-03-28 12:43:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 12:39:01, To:, 2026-03-28 12:43:27, Duration (s):, 266, Events Per Second:, 1.694, Events:, 452, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 265, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 93, Livegrid:, 93, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49530 2026-03-28 12:43:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s781ms. 2026-03-28 12:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2190 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11420 KB; 2026-03-28 12:44:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 12:44:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 12:44:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 12:44:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 12:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 12:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2190 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11446 KB; 2026-03-28 12:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2190 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11546 KB; 2026-03-28 12:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2190 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 254 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11550 KB; 2026-03-28 12:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2190 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 256 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11608 KB; 2026-03-28 12:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2190 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 287 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11700 KB; 2026-03-28 12:49:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 12:49:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 12:49:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 12:49:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 12:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 12:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2190 KB; ProcessInfo: 947 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 309 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 150 KB; BaseEvent: 65 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11817 KB; 2026-03-28 12:50:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 12:43:15, To:, 2026-03-28 12:50:27, Duration (s):, 432, Events Per Second:, 1.292, Events:, 559, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 473, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 25, Livegrid:, 25, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 64430 2026-03-28 12:50:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s829ms. 2026-03-28 12:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1022 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 295 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 70 KB; BaseEvent: 60 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11688 KB; 2026-03-28 12:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1041 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 85 KB; BaseEvent: 64 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11728 KB; 2026-03-28 12:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1042 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 88 KB; BaseEvent: 65 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11699 KB; 2026-03-28 12:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1045 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 75 KB; BaseEvent: 68 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11628 KB; 2026-03-28 12:54:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 12:54:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 12:54:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 12:54:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 12:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 12:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1058 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 150 KB; BaseEvent: 75 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11638 KB; 2026-03-28 12:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1072 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 150 KB; BaseEvent: 78 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11664 KB; 2026-03-28 12:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2190 KB; ProcessInfo: 1073 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 150 KB; BaseEvent: 78 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11662 KB; 2026-03-28 12:57:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 12:50:28, To:, 2026-03-28 12:57:27, Duration (s):, 419, Events Per Second:, 1.160, Events:, 487, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 428, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 58, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58192 2026-03-28 12:57:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s130ms. 2026-03-28 12:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2190 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11263 KB; 2026-03-28 12:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2190 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11252 KB; 2026-03-28 12:59:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 12:59:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 12:59:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 12:59:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 12:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 12:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 12:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2195 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11304 KB; 2026-03-28 13:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 2195 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 133 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11490 KB; 2026-03-28 13:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2750 KB; ModuleMetadata: 2195 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 117 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11539 KB; 2026-03-28 13:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 2195 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 131 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11555 KB; 2026-03-28 13:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2195 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 146 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11571 KB; 2026-03-28 13:04:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 13:00:00, To:, 2026-03-28 13:04:27, Duration (s):, 267, Events Per Second:, 1.128, Events:, 302, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 283, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38276 2026-03-28 13:04:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s698ms. 2026-03-28 13:04:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 13:04:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 13:04:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 13:04:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 13:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 13:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2195 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11368 KB; 2026-03-28 13:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2195 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11387 KB; 2026-03-28 13:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2195 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11379 KB; 2026-03-28 13:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2195 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11369 KB; 2026-03-28 13:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2195 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11439 KB; 2026-03-28 13:09:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 13:09:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 13:09:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 13:09:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 13:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 13:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2195 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 129 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11446 KB; 2026-03-28 13:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2195 KB; ProcessInfo: 956 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 246 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11741 KB; 2026-03-28 13:11:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 13:04:27, To:, 2026-03-28 13:11:27, Duration (s):, 420, Events Per Second:, 0.751, Events:, 316, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 315, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43005 2026-03-28 13:11:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s843ms. 2026-03-28 13:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2195 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 152 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11531 KB; 2026-03-28 13:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2195 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 132 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11497 KB; 2026-03-28 13:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2195 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 134 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11494 KB; 2026-03-28 13:14:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 13:14:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 13:14:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 13:14:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 13:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 13:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2196 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11492 KB; 2026-03-28 13:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2196 KB; ProcessInfo: 1026 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 272 KB; rules::ProcessConditionsCache: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 152 KB; BaseEvent: 58 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11859 KB; 2026-03-28 13:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2196 KB; ProcessInfo: 1198 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 395 KB; ModuleInfoCache: 388 KB; TcpIpConnectionsManager: 333 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 152 KB; BaseEvent: 144 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12350 KB; 2026-03-28 13:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2196 KB; ProcessInfo: 1222 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; TcpIpConnectionsManager: 348 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 152 KB; BaseEvent: 149 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; rules::ProcessConditionsCache: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12013 KB; 2026-03-28 13:18:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 13:11:27, To:, 2026-03-28 13:18:27, Duration (s):, 420, Events Per Second:, 2.298, Events:, 967, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 849, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 115, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 115058 2026-03-28 13:18:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s944ms. 2026-03-28 13:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2196 KB; ProcessInfo: 1095 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 313 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11681 KB; 2026-03-28 13:19:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 13:19:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 13:19:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 13:19:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 13:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 13:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2196 KB; ProcessInfo: 1101 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11612 KB; 2026-03-28 13:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2196 KB; ProcessInfo: 1123 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11650 KB; 2026-03-28 13:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2196 KB; ProcessInfo: 1123 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11621 KB; 2026-03-28 13:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2196 KB; ProcessInfo: 1147 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11671 KB; 2026-03-28 13:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2196 KB; ProcessInfo: 1147 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 43 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11638 KB; 2026-03-28 13:24:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 13:24:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 13:24:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 13:24:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 13:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 13:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2196 KB; ProcessInfo: 1195 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11832 KB; 2026-03-28 13:25:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 13:18:27, To:, 2026-03-28 13:25:27, Duration (s):, 420, Events Per Second:, 0.751, Events:, 316, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 315, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41289 2026-03-28 13:25:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s105ms. 2026-03-28 13:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2196 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 47 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11336 KB; 2026-03-28 13:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2196 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11336 KB; 2026-03-28 13:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2196 KB; ProcessInfo: 882 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11478 KB; 2026-03-28 13:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2196 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 47 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11429 KB; 2026-03-28 13:29:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 13:29:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 13:29:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 13:29:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 13:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 13:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2198 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11453 KB; 2026-03-28 13:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2198 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11449 KB; 2026-03-28 13:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2198 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11426 KB; 2026-03-28 13:32:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 13:25:27, To:, 2026-03-28 13:32:27, Duration (s):, 420, Events Per Second:, 0.539, Events:, 227, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 226, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31502 2026-03-28 13:32:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s634ms. 2026-03-28 13:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2198 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11235 KB; 2026-03-28 13:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2198 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11239 KB; 2026-03-28 13:34:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 13:34:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 13:34:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 13:34:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 13:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 13:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2198 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 99 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11364 KB; 2026-03-28 13:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2198 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11316 KB; 2026-03-28 13:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2198 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11377 KB; 2026-03-28 13:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2198 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11388 KB; 2026-03-28 13:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2198 KB; ProcessInfo: 951 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 94 KB; ProcessInfoCommandLineTag: 63 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11605 KB; 2026-03-28 13:39:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 13:32:32, To:, 2026-03-28 13:39:27, Duration (s):, 415, Events Per Second:, 1.150, Events:, 478, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 469, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 59287 2026-03-28 13:39:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s809ms. 2026-03-28 13:39:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 13:39:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 13:39:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 13:39:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 13:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 13:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2198 KB; ProcessInfo: 904 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11462 KB; 2026-03-28 13:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2198 KB; ProcessInfo: 909 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 84 KB; ProcessInfoCommandLineTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11485 KB; 2026-03-28 13:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2198 KB; ProcessInfo: 957 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11604 KB; 2026-03-28 13:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2198 KB; ProcessInfo: 969 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 84 KB; ProcessInfoCommandLineTag: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11560 KB; 2026-03-28 13:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1003 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 64 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11653 KB; 2026-03-28 13:44:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 13:44:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 13:44:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 13:44:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 13:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 13:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1051 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 119 KB; ProcessInfoCommandLineTag: 64 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11771 KB; 2026-03-28 13:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1100 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 294 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 152 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 64 KB; BaseEvent: 49 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11867 KB; 2026-03-28 13:46:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 13:39:27, To:, 2026-03-28 13:46:27, Duration (s):, 420, Events Per Second:, 1.155, Events:, 486, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 485, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 60858 2026-03-28 13:46:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s586ms. 2026-03-28 13:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2198 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 83 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11487 KB; 2026-03-28 13:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1167 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 388 KB; TcpIpConnectionsManager: 372 KB; rules::ProcessConditionsCache: 366 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 150 KB; BaseEvent: 140 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12312 KB; 2026-03-28 13:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1202 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 390 KB; ModuleInfoCache: 388 KB; TcpIpConnectionsManager: 366 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; BaseEvent: 156 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12387 KB; 2026-03-28 13:49:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 13:49:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 13:49:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 13:49:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 13:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 13:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1214 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 408 KB; ModuleInfoCache: 388 KB; TcpIpConnectionsManager: 318 KB; CacheEntry: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; BaseEvent: 161 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12388 KB; 2026-03-28 13:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1245 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; BaseEvent: 177 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 51 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; rules::ProcessConditionsCache: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11936 KB; 2026-03-28 13:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1439 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; BaseEvent: 272 KB; TcpIpConnectionsManager: 271 KB; rules::ProcessConditionsCache: 242 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 76 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12539 KB; 2026-03-28 13:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1445 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 277 KB; BaseEvent: 275 KB; rules::ProcessConditionsCache: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 77 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12545 KB; 2026-03-28 13:53:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 13:46:16, To:, 2026-03-28 13:53:27, Duration (s):, 431, Events Per Second:, 3.635, Events:, 1570, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1323, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 244, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 179658 2026-03-28 13:53:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s916ms. 2026-03-28 13:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2198 KB; ProcessInfo: 994 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 264 KB; rules::ProcessConditionsCache: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11732 KB; 2026-03-28 13:54:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 13:54:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 13:54:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 13:54:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 13:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 13:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1003 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; rules::ProcessConditionsCache: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11694 KB; 2026-03-28 13:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1014 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; rules::ProcessConditionsCache: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11737 KB; 2026-03-28 13:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1017 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; rules::ProcessConditionsCache: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11738 KB; 2026-03-28 13:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1020 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; rules::ProcessConditionsCache: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11766 KB; 2026-03-28 13:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2198 KB; ProcessInfo: 1026 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; rules::ProcessConditionsCache: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11782 KB; 2026-03-28 13:59:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 13:59:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 13:59:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 13:59:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 13:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 13:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 13:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1038 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11775 KB; 2026-03-28 14:00:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 13:54:40, To:, 2026-03-28 14:00:27, Duration (s):, 347, Events Per Second:, 0.454, Events:, 158, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 117, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 20, Livegrid:, 20, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20874 2026-03-28 14:00:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s624ms. 2026-03-28 14:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2201 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 268 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11499 KB; 2026-03-28 14:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2201 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 268 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11499 KB; 2026-03-28 14:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2201 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11595 KB; 2026-03-28 14:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2201 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 270 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11572 KB; 2026-03-28 14:04:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 14:04:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 14:04:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 14:04:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 14:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 14:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2201 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 270 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11578 KB; 2026-03-28 14:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2201 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11548 KB; 2026-03-28 14:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2201 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11605 KB; 2026-03-28 14:07:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 14:01:13, To:, 2026-03-28 14:07:27, Duration (s):, 374, Events Per Second:, 0.480, Events:, 180, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 179, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24017 2026-03-28 14:07:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s999ms. 2026-03-28 14:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2201 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 291 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11581 KB; 2026-03-28 14:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2201 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 276 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11651 KB; 2026-03-28 14:09:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 14:09:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 14:09:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 14:09:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 14:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 14:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2201 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 280 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11666 KB; 2026-03-28 14:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2201 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11657 KB; 2026-03-28 14:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2201 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11658 KB; 2026-03-28 14:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2201 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11688 KB; 2026-03-28 14:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2201 KB; ProcessInfo: 909 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11662 KB; 2026-03-28 14:14:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 14:07:23, To:, 2026-03-28 14:14:27, Duration (s):, 424, Events Per Second:, 0.812, Events:, 345, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 344, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44252 2026-03-28 14:14:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s579ms. 2026-03-28 14:14:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 14:14:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 14:14:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 14:14:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 14:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 14:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2201 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; rules::ProcessConditionsCache: 341 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11617 KB; 2026-03-28 14:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2201 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 288 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11560 KB; 2026-03-28 14:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2201 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11557 KB; 2026-03-28 14:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2201 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11545 KB; 2026-03-28 14:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2201 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11548 KB; 2026-03-28 14:19:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 14:19:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 14:19:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 14:19:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 14:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 14:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2201 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 295 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11567 KB; 2026-03-28 14:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2201 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 295 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11550 KB; 2026-03-28 14:21:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 14:14:52, To:, 2026-03-28 14:21:27, Duration (s):, 395, Events Per Second:, 0.303, Events:, 120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 119, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16799 2026-03-28 14:21:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s548ms. 2026-03-28 14:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2201 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11486 KB; 2026-03-28 14:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2201 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11488 KB; 2026-03-28 14:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2201 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; rules::ProcessConditionsCache: 323 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11566 KB; 2026-03-28 14:24:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 14:24:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 14:24:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 14:24:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 14:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 14:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2201 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11540 KB; 2026-03-28 14:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2201 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 299 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11569 KB; 2026-03-28 14:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2201 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 299 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11582 KB; 2026-03-28 14:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2201 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11570 KB; 2026-03-28 14:28:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 14:21:54, To:, 2026-03-28 14:28:27, Duration (s):, 393, Events Per Second:, 0.294, Events:, 116, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 115, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16530 2026-03-28 14:28:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s623ms. 2026-03-28 14:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2784 KB; ModuleMetadata: 2201 KB; ProcessInfo: 768 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11554 KB; 2026-03-28 14:29:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 14:29:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 14:29:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 14:29:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 14:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 14:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2785 KB; ModuleMetadata: 2201 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 307 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11575 KB; 2026-03-28 14:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2786 KB; ModuleMetadata: 2201 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 309 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11581 KB; 2026-03-28 14:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 2201 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 309 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11534 KB; 2026-03-28 14:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2201 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 309 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11525 KB; 2026-03-28 14:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2201 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 314 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11541 KB; 2026-03-28 14:34:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 14:34:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 14:34:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 14:34:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 14:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 14:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2201 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; rules::ProcessConditionsCache: 318 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11553 KB; 2026-03-28 14:35:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 14:29:08, To:, 2026-03-28 14:35:27, Duration (s):, 379, Events Per Second:, 0.171, Events:, 65, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 62, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10784 2026-03-28 14:35:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s474ms. 2026-03-28 14:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2201 KB; ProcessInfo: 976 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 128 KB; BaseEvent: 92 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11720 KB; 2026-03-28 14:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2201 KB; ProcessInfo: 976 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 128 KB; BaseEvent: 92 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11725 KB; 2026-03-28 14:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1023 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; TcpIpConnectionsManager: 318 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 150 KB; BaseEvent: 100 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11914 KB; 2026-03-28 14:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1072 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 139 KB; BaseEvent: 115 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11832 KB; 2026-03-28 14:39:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 14:39:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 14:39:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 14:39:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 14:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 14:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1094 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 139 KB; BaseEvent: 120 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11887 KB; 2026-03-28 14:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1130 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 150 KB; BaseEvent: 136 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11964 KB; 2026-03-28 14:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1367 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; TcpIpConnectionsManager: 325 KB; CacheEntry: 317 KB; BaseEvent: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 74 KB; rules::ProcessConditionsCache: 64 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12327 KB; 2026-03-28 14:42:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 14:35:27, To:, 2026-03-28 14:42:27, Duration (s):, 420, Events Per Second:, 3.825, Events:, 1610, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1404, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 205, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 183629 2026-03-28 14:42:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s925ms. 2026-03-28 14:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1058 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11656 KB; 2026-03-28 14:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1058 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11656 KB; 2026-03-28 14:44:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 14:44:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 14:44:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 14:44:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 14:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 14:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2739 KB; ModuleMetadata: 2203 KB; ProcessInfo: 1060 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11581 KB; 2026-03-28 14:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2203 KB; ProcessInfo: 1083 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11611 KB; 2026-03-28 14:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2203 KB; ProcessInfo: 1083 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11606 KB; 2026-03-28 14:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2203 KB; ProcessInfo: 1091 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11626 KB; 2026-03-28 14:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2203 KB; ProcessInfo: 1091 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11607 KB; 2026-03-28 14:49:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 14:43:16, To:, 2026-03-28 14:49:27, Duration (s):, 371, Events Per Second:, 0.266, Events:, 99, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 96, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14070 2026-03-28 14:49:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s620ms. 2026-03-28 14:49:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 14:49:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 14:49:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 14:49:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 14:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 14:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2203 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11282 KB; 2026-03-28 14:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 2203 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11292 KB; 2026-03-28 14:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2203 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11267 KB; 2026-03-28 14:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2203 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11273 KB; 2026-03-28 14:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2203 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11296 KB; 2026-03-28 14:54:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 14:54:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 14:54:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 14:54:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 14:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 14:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2203 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 213 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11376 KB; 2026-03-28 14:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2203 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 213 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11371 KB; 2026-03-28 14:56:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 14:50:00, To:, 2026-03-28 14:56:27, Duration (s):, 387, Events Per Second:, 0.438, Events:, 170, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 169, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22860 2026-03-28 14:56:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s625ms. 2026-03-28 14:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2203 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11317 KB; 2026-03-28 14:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2203 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11300 KB; 2026-03-28 14:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2203 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11286 KB; 2026-03-28 14:59:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 14:59:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 14:59:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 14:59:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 14:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 14:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 14:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2203 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 94 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11384 KB; 2026-03-28 15:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2203 KB; ProcessInfo: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 134 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11536 KB; 2026-03-28 15:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2203 KB; ProcessInfo: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 134 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11539 KB; 2026-03-28 15:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2203 KB; ProcessInfo: 923 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 137 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11518 KB; 2026-03-28 15:03:27 7967594126c0 Info: Events Statistics, From:, 2026-03-28 14:57:40, To:, 2026-03-28 15:03:27, Duration (s):, 347, Events Per Second:, 0.862, Events:, 300, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 297, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38411 2026-03-28 15:03:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s671ms. 2026-03-28 15:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2203 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11399 KB; 2026-03-28 15:04:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 15:04:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 15:04:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 15:04:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 15:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 15:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2203 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11401 KB; 2026-03-28 15:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2203 KB; ProcessInfo: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 215 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 51 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11630 KB; 2026-03-28 15:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2203 KB; ProcessInfo: 1194 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; TcpIpConnectionsManager: 321 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; BaseEvent: 164 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 51 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12084 KB; 2026-03-28 15:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2203 KB; ProcessInfo: 1217 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; TcpIpConnectionsManager: 346 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; rules::ProcessConditionsCache: 173 KB; BaseEvent: 166 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 51 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12213 KB; 2026-03-28 15:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2203 KB; ProcessInfo: 1263 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; TcpIpConnectionsManager: 326 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; BaseEvent: 178 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 59 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12186 KB; 2026-03-28 15:09:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 15:09:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 15:09:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 15:09:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 15:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 15:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2203 KB; ProcessInfo: 1267 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 197 KB; BaseEvent: 181 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 121 KB; ProcessInfoCommandLineTag: 59 KB; BatchSerializer::EventsQueueTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12076 KB; 2026-03-28 15:10:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 15:04:46, To:, 2026-03-28 15:10:27, Duration (s):, 341, Events Per Second:, 3.351, Events:, 1146, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 985, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 160, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 131165 2026-03-28 15:10:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s702ms. 2026-03-28 15:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2203 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 124 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11431 KB; 2026-03-28 15:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2203 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11404 KB; 2026-03-28 15:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2203 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11392 KB; 2026-03-28 15:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2203 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11462 KB; 2026-03-28 15:14:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 15:14:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 15:14:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 15:14:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 15:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 15:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2204 KB; ProcessInfo: 869 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11439 KB; 2026-03-28 15:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2204 KB; ProcessInfo: 869 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11446 KB; 2026-03-28 15:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2204 KB; ProcessInfo: 922 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 233 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11681 KB; 2026-03-28 15:17:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 15:10:40, To:, 2026-03-28 15:17:28, Duration (s):, 408, Events Per Second:, 0.456, Events:, 186, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 185, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27353 2026-03-28 15:17:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s746ms. 2026-03-28 15:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2748 KB; ModuleMetadata: 2204 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11590 KB; 2026-03-28 15:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2204 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 126 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11469 KB; 2026-03-28 15:19:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 15:19:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 15:19:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 15:19:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 15:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 15:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2204 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 132 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11481 KB; 2026-03-28 15:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2204 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 139 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11513 KB; 2026-03-28 15:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2204 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 152 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11538 KB; 2026-03-28 15:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2204 KB; ProcessInfo: 900 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 141 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11550 KB; 2026-03-28 15:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2204 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 137 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11543 KB; 2026-03-28 15:24:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 15:17:27, To:, 2026-03-28 15:24:28, Duration (s):, 421, Events Per Second:, 0.641, Events:, 270, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 269, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37470 2026-03-28 15:24:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s687ms. 2026-03-28 15:24:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 15:24:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 15:24:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 15:24:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 15:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 15:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2204 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 133 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11405 KB; 2026-03-28 15:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2761 KB; ModuleMetadata: 2204 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 133 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11411 KB; 2026-03-28 15:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2204 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 193 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11511 KB; 2026-03-28 15:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2204 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 135 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11399 KB; 2026-03-28 15:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2204 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 236 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 61 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11732 KB; 2026-03-28 15:29:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 15:29:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 15:29:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 15:29:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 15:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 15:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1031 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 236 KB; TcpIpConnectionsManager: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 152 KB; BaseEvent: 71 KB; ProcessInfoCommandLineTag: 64 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11852 KB; 2026-03-28 15:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1031 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 152 KB; BaseEvent: 73 KB; ProcessInfoCommandLineTag: 64 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11859 KB; 2026-03-28 15:31:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 15:24:29, To:, 2026-03-28 15:31:28, Duration (s):, 419, Events Per Second:, 1.666, Events:, 698, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 605, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 46, Livegrid:, 46, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 82969 2026-03-28 15:31:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s831ms. 2026-03-28 15:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 2206 KB; ProcessInfo: 973 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11685 KB; 2026-03-28 15:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1001 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11790 KB; 2026-03-28 15:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1003 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 240 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11707 KB; 2026-03-28 15:34:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 15:34:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 15:34:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 15:34:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 15:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 15:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1007 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11710 KB; 2026-03-28 15:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1007 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11713 KB; 2026-03-28 15:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1057 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 286 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11866 KB; 2026-03-28 15:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1085 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 279 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11929 KB; 2026-03-28 15:38:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 15:32:48, To:, 2026-03-28 15:38:28, Duration (s):, 340, Events Per Second:, 0.853, Events:, 290, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 289, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37879 2026-03-28 15:38:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s676ms. 2026-03-28 15:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2206 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 249 KB; rules::ProcessConditionsCache: 242 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11645 KB; 2026-03-28 15:39:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 15:39:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 15:39:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 15:39:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 15:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 15:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2206 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 301 KB; TcpIpConnectionsManager: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11797 KB; 2026-03-28 15:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2206 KB; ProcessInfo: 935 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 247 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11713 KB; 2026-03-28 15:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2206 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 249 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11710 KB; 2026-03-28 15:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2206 KB; ProcessInfo: 947 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11697 KB; 2026-03-28 15:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2206 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11686 KB; 2026-03-28 15:44:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 15:44:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 15:44:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 15:44:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 15:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 15:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1100 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 152 KB; BaseEvent: 106 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12154 KB; 2026-03-28 15:45:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 15:38:27, To:, 2026-03-28 15:45:28, Duration (s):, 421, Events Per Second:, 1.688, Events:, 711, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 643, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 67, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 85938 2026-03-28 15:45:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s823ms. 2026-03-28 15:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2206 KB; ProcessInfo: 931 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 403 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11831 KB; 2026-03-28 15:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 2206 KB; ProcessInfo: 932 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 396 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11840 KB; 2026-03-28 15:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 2206 KB; ProcessInfo: 932 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 396 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11784 KB; 2026-03-28 15:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2206 KB; ProcessInfo: 985 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11637 KB; 2026-03-28 15:49:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 15:49:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 15:49:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 15:49:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 15:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 15:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1108 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 152 KB; BaseEvent: 67 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11951 KB; 2026-03-28 15:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1113 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 295 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 150 KB; BaseEvent: 68 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11904 KB; 2026-03-28 15:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1136 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 295 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 152 KB; BaseEvent: 76 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11956 KB; 2026-03-28 15:52:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 15:45:30, To:, 2026-03-28 15:52:28, Duration (s):, 418, Events Per Second:, 1.365, Events:, 571, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 522, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 48, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67889 2026-03-28 15:52:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s537ms. 2026-03-28 15:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2206 KB; ProcessInfo: 940 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 150 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11546 KB; 2026-03-28 15:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2206 KB; ProcessInfo: 940 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 148 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11533 KB; 2026-03-28 15:54:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 15:54:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 15:54:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 15:54:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 15:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 15:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2206 KB; ProcessInfo: 942 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 151 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11530 KB; 2026-03-28 15:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2206 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 151 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11530 KB; 2026-03-28 15:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2206 KB; ProcessInfo: 978 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 203 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11635 KB; 2026-03-28 15:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2206 KB; ProcessInfo: 991 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 151 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11632 KB; 2026-03-28 15:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2206 KB; ProcessInfo: 1044 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11840 KB; 2026-03-28 15:59:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 15:52:32, To:, 2026-03-28 15:59:28, Duration (s):, 416, Events Per Second:, 0.651, Events:, 271, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 270, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35952 2026-03-28 15:59:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s765ms. 2026-03-28 15:59:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 15:59:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 15:59:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 15:59:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 15:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 15:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 15:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2210 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11675 KB; 2026-03-28 16:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2210 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11649 KB; 2026-03-28 16:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2210 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11676 KB; 2026-03-28 16:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2210 KB; ProcessInfo: 959 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11711 KB; 2026-03-28 16:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2210 KB; ProcessInfo: 962 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11692 KB; 2026-03-28 16:04:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 16:04:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 16:04:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 16:04:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 16:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 16:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2210 KB; ProcessInfo: 962 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 203 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11672 KB; 2026-03-28 16:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2210 KB; ProcessInfo: 962 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 201 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11654 KB; 2026-03-28 16:06:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 15:59:22, To:, 2026-03-28 16:06:28, Duration (s):, 426, Events Per Second:, 0.633, Events:, 270, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 269, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38299 2026-03-28 16:06:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s744ms. 2026-03-28 16:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2210 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 201 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11403 KB; 2026-03-28 16:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2210 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 201 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11403 KB; 2026-03-28 16:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2210 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11534 KB; 2026-03-28 16:09:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 16:09:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 16:09:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 16:09:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 16:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 16:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2210 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11534 KB; 2026-03-28 16:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2773 KB; ModuleMetadata: 2210 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11800 KB; 2026-03-28 16:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2774 KB; ModuleMetadata: 2210 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 220 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11746 KB; 2026-03-28 16:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2761 KB; ModuleMetadata: 2210 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 220 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11736 KB; 2026-03-28 16:13:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 16:03:27, To:, 2026-03-28 16:13:28, Duration (s):, 601, Events Per Second:, 0.733, Events:, 441, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 440, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 55924 2026-03-28 16:13:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s239ms. 2026-03-28 16:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2762 KB; ModuleMetadata: 2210 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 201 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11572 KB; 2026-03-28 16:14:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 16:14:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 16:14:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 16:14:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 16:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 16:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 2210 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 203 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11566 KB; 2026-03-28 16:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2210 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 203 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11570 KB; 2026-03-28 16:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2805 KB; ModuleMetadata: 2210 KB; ProcessInfo: 882 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; rules::ProcessConditionsCache: 203 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11636 KB; 2026-03-28 16:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2808 KB; ModuleMetadata: 2210 KB; ProcessInfo: 882 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 203 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11632 KB; 2026-03-28 16:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2827 KB; ModuleMetadata: 2210 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; rules::ProcessConditionsCache: 205 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11669 KB; 2026-03-28 16:19:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 16:19:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 16:19:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 16:19:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 16:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 16:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2791 KB; ModuleMetadata: 2210 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 328 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11902 KB; 2026-03-28 16:20:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 16:14:33, To:, 2026-03-28 16:20:28, Duration (s):, 355, Events Per Second:, 0.461, Events:, 164, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 163, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24971 2026-03-28 16:20:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s085ms. 2026-03-28 16:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2210 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 238 KB; rules::ProcessConditionsCache: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11540 KB; 2026-03-28 16:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2210 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11543 KB; 2026-03-28 16:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2210 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 216 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11522 KB; 2026-03-28 16:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2210 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11569 KB; 2026-03-28 16:24:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 16:24:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 16:24:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 16:24:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 16:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 16:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2210 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 214 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11550 KB; 2026-03-28 16:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2210 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11582 KB; 2026-03-28 16:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2210 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 214 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11564 KB; 2026-03-28 16:27:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 16:20:27, To:, 2026-03-28 16:27:28, Duration (s):, 421, Events Per Second:, 0.377, Events:, 159, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 153, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25645 2026-03-28 16:27:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s757ms. 2026-03-28 16:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2210 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11454 KB; 2026-03-28 16:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2210 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11459 KB; 2026-03-28 16:29:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 16:29:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 16:29:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 16:29:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 16:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 16:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2210 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 294 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11658 KB; 2026-03-28 16:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2210 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 226 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11574 KB; 2026-03-28 16:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2210 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 250 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11683 KB; 2026-03-28 16:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2210 KB; ProcessInfo: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 305 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11804 KB; 2026-03-28 16:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2210 KB; ProcessInfo: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 249 KB; rules::ProcessConditionsCache: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11698 KB; 2026-03-28 16:34:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 16:27:34, To:, 2026-03-28 16:34:28, Duration (s):, 414, Events Per Second:, 0.912, Events:, 378, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 377, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 45980 2026-03-28 16:34:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s047ms. 2026-03-28 16:34:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 16:34:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 16:34:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 16:34:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 16:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 16:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2210 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 233 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11567 KB; 2026-03-28 16:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2210 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 230 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11561 KB; 2026-03-28 16:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2210 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11524 KB; 2026-03-28 16:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2210 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11532 KB; 2026-03-28 16:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2210 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11629 KB; 2026-03-28 16:39:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 16:39:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 16:39:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 16:39:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 16:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 16:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2210 KB; ProcessInfo: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11646 KB; 2026-03-28 16:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2210 KB; ProcessInfo: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11660 KB; 2026-03-28 16:41:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 16:34:37, To:, 2026-03-28 16:41:28, Duration (s):, 411, Events Per Second:, 0.564, Events:, 232, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 231, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31201 2026-03-28 16:41:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s443ms. 2026-03-28 16:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2210 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11536 KB; 2026-03-28 16:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2210 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 320 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11729 KB; 2026-03-28 16:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2210 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 241 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11635 KB; 2026-03-28 16:44:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 16:44:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 16:44:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 16:44:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 16:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 16:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2212 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 298 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11748 KB; 2026-03-28 16:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2212 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 246 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11673 KB; 2026-03-28 16:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2212 KB; ProcessInfo: 947 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 246 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11707 KB; 2026-03-28 16:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2212 KB; ProcessInfo: 948 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 246 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11716 KB; 2026-03-28 16:48:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 16:41:22, To:, 2026-03-28 16:48:28, Duration (s):, 426, Events Per Second:, 0.661, Events:, 282, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 281, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35538 2026-03-28 16:48:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s471ms. 2026-03-28 16:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2212 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11505 KB; 2026-03-28 16:49:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 16:49:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 16:49:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 16:49:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 16:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 16:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2782 KB; ModuleMetadata: 2212 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11577 KB; 2026-03-28 16:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2783 KB; ModuleMetadata: 2212 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11579 KB; 2026-03-28 16:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2212 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11568 KB; 2026-03-28 16:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2212 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11613 KB; 2026-03-28 16:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2212 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11590 KB; 2026-03-28 16:54:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 16:54:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 16:54:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 16:54:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 16:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 16:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2212 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11617 KB; 2026-03-28 16:55:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 16:50:03, To:, 2026-03-28 16:55:28, Duration (s):, 325, Events Per Second:, 0.538, Events:, 175, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 174, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23378 2026-03-28 16:55:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s696ms. 2026-03-28 16:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2212 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11533 KB; 2026-03-28 16:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2212 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11594 KB; 2026-03-28 16:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2212 KB; ProcessInfo: 1051 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 152 KB; BaseEvent: 115 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11841 KB; 2026-03-28 16:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2212 KB; ProcessInfo: 1111 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; TcpIpConnectionsManager: 320 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 184 KB; cloudutils::CloudData: 152 KB; BaseEvent: 142 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12066 KB; 2026-03-28 16:59:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 16:59:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 16:59:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 16:59:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 16:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 16:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 16:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2212 KB; ProcessInfo: 1130 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 308 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 152 KB; BaseEvent: 147 KB; ProcessInfoCommandLineTag: 49 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12120 KB; 2026-03-28 17:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2212 KB; ProcessInfo: 1141 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 216 KB; rules::ProcessConditionsCache: 215 KB; BaseEvent: 153 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 49 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12054 KB; 2026-03-28 17:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2212 KB; ProcessInfo: 1144 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::ProcessConditionsCache: 210 KB; TcpIpConnectionsManager: 193 KB; BaseEvent: 154 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 49 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12039 KB; 2026-03-28 17:02:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 16:55:45, To:, 2026-03-28 17:02:28, Duration (s):, 403, Events Per Second:, 2.245, Events:, 906, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 776, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 129, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 106613 2026-03-28 17:02:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s946ms. 2026-03-28 17:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2212 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11603 KB; 2026-03-28 17:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2212 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 220 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11542 KB; 2026-03-28 17:04:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 17:04:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 17:04:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 17:04:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 17:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 17:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 2212 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 215 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11548 KB; 2026-03-28 17:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2212 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 198 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11536 KB; 2026-03-28 17:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2212 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11563 KB; 2026-03-28 17:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2212 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 207 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11578 KB; 2026-03-28 17:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2212 KB; ProcessInfo: 932 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11658 KB; 2026-03-28 17:09:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 17:02:37, To:, 2026-03-28 17:09:28, Duration (s):, 411, Events Per Second:, 0.862, Events:, 355, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 354, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44968 2026-03-28 17:09:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s996ms. 2026-03-28 17:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 17:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:09:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 17:09:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 17:09:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 17:09:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 17:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2212 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11556 KB; 2026-03-28 17:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2212 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 197 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11527 KB; 2026-03-28 17:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2212 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 197 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11535 KB; 2026-03-28 17:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2212 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 237 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11616 KB; 2026-03-28 17:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2212 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 199 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11593 KB; 2026-03-28 17:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 17:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:14:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 17:14:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 17:14:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 17:14:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 17:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2212 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 199 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11603 KB; 2026-03-28 17:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2212 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 238 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11692 KB; 2026-03-28 17:16:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 17:09:55, To:, 2026-03-28 17:16:28, Duration (s):, 393, Events Per Second:, 0.564, Events:, 222, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 221, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29212 2026-03-28 17:16:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s973ms. 2026-03-28 17:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2212 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11509 KB; 2026-03-28 17:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2212 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11526 KB; 2026-03-28 17:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2212 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 210 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11524 KB; 2026-03-28 17:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 17:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:19:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 17:19:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 17:19:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 17:19:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 17:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2212 KB; ProcessInfo: 869 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 219 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11557 KB; 2026-03-28 17:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2215 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 247 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11651 KB; 2026-03-28 17:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2217 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 215 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11619 KB; 2026-03-28 17:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2217 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 212 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11607 KB; 2026-03-28 17:23:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 17:16:27, To:, 2026-03-28 17:23:28, Duration (s):, 421, Events Per Second:, 0.555, Events:, 234, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 205, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 14, Livegrid:, 14, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29879 2026-03-28 17:23:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s114ms. 2026-03-28 17:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2217 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 212 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11451 KB; 2026-03-28 17:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 17:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:24:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 17:24:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 17:24:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 17:24:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 17:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2217 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11459 KB; 2026-03-28 17:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2220 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11497 KB; 2026-03-28 17:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2220 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11512 KB; 2026-03-28 17:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2220 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11510 KB; 2026-03-28 17:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2220 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11537 KB; 2026-03-28 17:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 17:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:29:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 17:29:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 17:29:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 17:29:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 17:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2221 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11661 KB; 2026-03-28 17:30:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 17:24:04, To:, 2026-03-28 17:30:28, Duration (s):, 384, Events Per Second:, 0.650, Events:, 250, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 155, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 47, Livegrid:, 47, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30240 2026-03-28 17:30:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s641ms. 2026-03-28 17:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2221 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 258 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 151 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11567 KB; 2026-03-28 17:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2225 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 269 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11640 KB; 2026-03-28 17:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2225 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 304 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11706 KB; 2026-03-28 17:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2226 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 286 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11713 KB; 2026-03-28 17:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 17:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:34:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 17:34:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 17:34:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 17:34:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 17:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2226 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 258 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11673 KB; 2026-03-28 17:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2226 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11676 KB; 2026-03-28 17:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2226 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11662 KB; 2026-03-28 17:37:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 17:30:27, To:, 2026-03-28 17:37:28, Duration (s):, 421, Events Per Second:, 0.707, Events:, 298, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 247, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 25, Livegrid:, 25, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36115 2026-03-28 17:37:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s666ms. 2026-03-28 17:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2226 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 306 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 152 KB; BaseEvent: 55 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11682 KB; 2026-03-28 17:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2228 KB; ProcessInfo: 956 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 401 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 152 KB; BaseEvent: 128 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12048 KB; 2026-03-28 17:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 17:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:39:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 17:39:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 17:39:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 17:39:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 17:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2228 KB; ProcessInfo: 972 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; rules::ProcessConditionsCache: 372 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 152 KB; BaseEvent: 134 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12069 KB; 2026-03-28 17:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2228 KB; ProcessInfo: 1003 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 152 KB; BaseEvent: 140 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11822 KB; 2026-03-28 17:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2228 KB; ProcessInfo: 1026 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 152 KB; BaseEvent: 147 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11843 KB; 2026-03-28 17:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2228 KB; ProcessInfo: 1078 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; BaseEvent: 158 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 145 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11996 KB; 2026-03-28 17:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2228 KB; ProcessInfo: 1082 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; BaseEvent: 166 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11883 KB; 2026-03-28 17:44:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 17:37:29, To:, 2026-03-28 17:44:28, Duration (s):, 419, Events Per Second:, 2.475, Events:, 1039, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 754, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 119, Livegrid:, 119, OriginUrl:, 0, Alarms:, 46, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 114199 2026-03-28 17:44:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s970ms. 2026-03-28 17:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 17:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:44:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 17:44:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 17:44:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 17:44:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 17:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2228 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11413 KB; 2026-03-28 17:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2228 KB; ProcessInfo: 869 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11400 KB; 2026-03-28 17:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2228 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11394 KB; 2026-03-28 17:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2228 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11407 KB; 2026-03-28 17:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2228 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11419 KB; 2026-03-28 17:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 17:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:49:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 17:49:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 17:49:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 17:49:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 17:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2228 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11490 KB; 2026-03-28 17:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2228 KB; ProcessInfo: 970 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11653 KB; 2026-03-28 17:51:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 17:44:53, To:, 2026-03-28 17:51:28, Duration (s):, 395, Events Per Second:, 0.743, Events:, 294, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 293, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37947 2026-03-28 17:51:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s295ms. 2026-03-28 17:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2228 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11432 KB; 2026-03-28 17:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 2228 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11422 KB; 2026-03-28 17:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 2228 KB; ProcessInfo: 868 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11399 KB; 2026-03-28 17:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 17:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:54:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 17:54:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 17:54:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 17:54:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 17:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 2228 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 48 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11396 KB; 2026-03-28 17:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2228 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11407 KB; 2026-03-28 17:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2228 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11419 KB; 2026-03-28 17:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2228 KB; ProcessInfo: 917 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11481 KB; 2026-03-28 17:58:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 17:51:28, To:, 2026-03-28 17:58:28, Duration (s):, 420, Events Per Second:, 0.518, Events:, 218, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 217, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30131 2026-03-28 17:58:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s398ms. 2026-03-28 17:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2228 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11341 KB; 2026-03-28 17:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 17:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 17:59:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 17:59:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 17:59:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 17:59:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 18:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2232 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11410 KB; 2026-03-28 18:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2232 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 110 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11588 KB; 2026-03-28 18:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2232 KB; ProcessInfo: 940 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 110 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11592 KB; 2026-03-28 18:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2232 KB; ProcessInfo: 947 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 110 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11594 KB; 2026-03-28 18:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2232 KB; ProcessInfo: 957 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 110 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11591 KB; 2026-03-28 18:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 18:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:04:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 18:04:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 18:04:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 18:04:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 18:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2232 KB; ProcessInfo: 967 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11612 KB; 2026-03-28 18:05:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 17:58:26, To:, 2026-03-28 18:05:28, Duration (s):, 422, Events Per Second:, 0.986, Events:, 417, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 408, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52239 2026-03-28 18:05:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s873ms. 2026-03-28 18:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2232 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11364 KB; 2026-03-28 18:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2232 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11371 KB; 2026-03-28 18:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2232 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11378 KB; 2026-03-28 18:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2232 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11504 KB; 2026-03-28 18:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 18:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:09:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 18:09:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 18:09:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 18:09:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 18:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2232 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11533 KB; 2026-03-28 18:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2232 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11526 KB; 2026-03-28 18:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2232 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11527 KB; 2026-03-28 18:12:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 18:05:56, To:, 2026-03-28 18:12:28, Duration (s):, 392, Events Per Second:, 0.703, Events:, 276, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 272, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35831 2026-03-28 18:12:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s729ms. 2026-03-28 18:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2232 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11359 KB; 2026-03-28 18:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2232 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11365 KB; 2026-03-28 18:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 18:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:14:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 18:14:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 18:14:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 18:14:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 18:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2234 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11362 KB; 2026-03-28 18:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2234 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11365 KB; 2026-03-28 18:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2234 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11376 KB; 2026-03-28 18:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2234 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11377 KB; 2026-03-28 18:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2234 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11382 KB; 2026-03-28 18:19:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 18:12:32, To:, 2026-03-28 18:19:28, Duration (s):, 416, Events Per Second:, 0.055, Events:, 23, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 20, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 4763 2026-03-28 18:19:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s674ms. 2026-03-28 18:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 18:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:19:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 18:19:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 18:19:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 18:19:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 18:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2234 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11387 KB; 2026-03-28 18:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2234 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11455 KB; 2026-03-28 18:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2234 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 134 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11495 KB; 2026-03-28 18:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2234 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11482 KB; 2026-03-28 18:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2234 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 139 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11478 KB; 2026-03-28 18:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 18:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:24:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 18:24:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 18:24:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 18:24:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 18:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2234 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11454 KB; 2026-03-28 18:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2234 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11485 KB; 2026-03-28 18:26:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 18:19:13, To:, 2026-03-28 18:26:28, Duration (s):, 435, Events Per Second:, 0.519, Events:, 226, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 225, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29568 2026-03-28 18:26:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s711ms. 2026-03-28 18:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2234 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 153 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11578 KB; 2026-03-28 18:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2234 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11491 KB; 2026-03-28 18:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2234 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 138 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11501 KB; 2026-03-28 18:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 18:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:29:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 18:29:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 18:29:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 18:29:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 18:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2234 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11507 KB; 2026-03-28 18:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2234 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 202 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 153 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11579 KB; 2026-03-28 18:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2234 KB; ProcessInfo: 910 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 175 KB; cloudutils::CloudData: 153 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11643 KB; 2026-03-28 18:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2234 KB; ProcessInfo: 910 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 175 KB; cloudutils::CloudData: 153 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11631 KB; 2026-03-28 18:33:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 18:26:22, To:, 2026-03-28 18:33:28, Duration (s):, 426, Events Per Second:, 0.822, Events:, 351, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 331, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43953 2026-03-28 18:33:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s884ms. 2026-03-28 18:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2243 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 210 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11510 KB; 2026-03-28 18:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 18:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:34:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 18:34:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 18:34:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 18:34:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 18:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2243 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 184 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11498 KB; 2026-03-28 18:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2245 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; rules::ProcessConditionsCache: 180 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11500 KB; 2026-03-28 18:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2245 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 178 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11504 KB; 2026-03-28 18:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2245 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; rules::ProcessConditionsCache: 206 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11585 KB; 2026-03-28 18:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2245 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11628 KB; 2026-03-28 18:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 18:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:39:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 18:39:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 18:39:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 18:39:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 18:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2245 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 195 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11647 KB; 2026-03-28 18:40:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 18:33:34, To:, 2026-03-28 18:40:28, Duration (s):, 414, Events Per Second:, 0.704, Events:, 292, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 233, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 29, Livegrid:, 29, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35814 2026-03-28 18:40:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s397ms. 2026-03-28 18:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2245 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 189 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11536 KB; 2026-03-28 18:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2245 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; rules::ProcessConditionsCache: 191 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11532 KB; 2026-03-28 18:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 2245 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; rules::ProcessConditionsCache: 189 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11517 KB; 2026-03-28 18:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2245 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; rules::ProcessConditionsCache: 194 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11527 KB; 2026-03-28 18:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 18:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:45:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 18:45:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 18:45:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 18:45:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 18:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2245 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; rules::ProcessConditionsCache: 194 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11533 KB; 2026-03-28 18:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2245 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 194 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11534 KB; 2026-03-28 18:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2245 KB; ProcessInfo: 869 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; rules::ProcessConditionsCache: 196 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11595 KB; 2026-03-28 18:47:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 18:40:33, To:, 2026-03-28 18:47:28, Duration (s):, 415, Events Per Second:, 0.337, Events:, 140, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 93, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18451 2026-03-28 18:47:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s661ms. 2026-03-28 18:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2245 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11540 KB; 2026-03-28 18:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2245 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11567 KB; 2026-03-28 18:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 18:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:50:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 18:50:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 18:50:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 18:50:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 18:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2245 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11564 KB; 2026-03-28 18:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2245 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 203 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11554 KB; 2026-03-28 18:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2245 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; rules::ProcessConditionsCache: 240 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11646 KB; 2026-03-28 18:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 2245 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11592 KB; 2026-03-28 18:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2245 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; rules::ProcessConditionsCache: 242 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11678 KB; 2026-03-28 18:54:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 18:47:27, To:, 2026-03-28 18:54:28, Duration (s):, 421, Events Per Second:, 0.605, Events:, 255, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 254, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33760 2026-03-28 18:54:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s556ms. 2026-03-28 18:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 18:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:55:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 18:55:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 18:55:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 18:55:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 18:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2245 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; rules::ProcessConditionsCache: 228 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11585 KB; 2026-03-28 18:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2245 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; rules::ProcessConditionsCache: 307 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 154 KB; BaseEvent: 51 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11821 KB; 2026-03-28 18:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2245 KB; ProcessInfo: 1009 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 408 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 154 KB; BaseEvent: 97 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12124 KB; 2026-03-28 18:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2245 KB; ProcessInfo: 1034 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 154 KB; BaseEvent: 109 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 39 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11776 KB; 2026-03-28 18:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2245 KB; ProcessInfo: 1061 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 154 KB; BaseEvent: 112 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11886 KB; 2026-03-28 18:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 175, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 18:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 18:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:00:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 19:00:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 19:00:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 19:00:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 19:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2246 KB; ProcessInfo: 1098 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 154 KB; BaseEvent: 124 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11867 KB; 2026-03-28 19:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2246 KB; ProcessInfo: 1098 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 154 KB; BaseEvent: 125 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11846 KB; 2026-03-28 19:01:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 18:54:19, To:, 2026-03-28 19:01:28, Duration (s):, 429, Events Per Second:, 1.852, Events:, 796, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 691, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 104, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 95076 2026-03-28 19:01:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s814ms. 2026-03-28 19:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2246 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 146 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11622 KB; 2026-03-28 19:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 2246 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11473 KB; 2026-03-28 19:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2246 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11483 KB; 2026-03-28 19:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 19:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:true, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:05:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 19:05:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 19:05:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 19:05:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 19:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2246 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 64 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11478 KB; 2026-03-28 19:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2246 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11449 KB; 2026-03-28 19:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2246 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11449 KB; 2026-03-28 19:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2246 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 137 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11638 KB; 2026-03-28 19:08:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 19:01:42, To:, 2026-03-28 19:08:28, Duration (s):, 406, Events Per Second:, 0.560, Events:, 228, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 227, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30575 2026-03-28 19:08:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s578ms. 2026-03-28 19:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2246 KB; ProcessInfo: 882 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 93 KB; ProcessInfoCommandLineTag: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11539 KB; 2026-03-28 19:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 19:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:10:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 19:10:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 19:10:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 19:10:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 19:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2246 KB; ProcessInfo: 910 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 63 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11582 KB; 2026-03-28 19:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2246 KB; ProcessInfo: 910 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 63 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11580 KB; 2026-03-28 19:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2246 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 64 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11556 KB; 2026-03-28 19:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 2246 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 63 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11533 KB; 2026-03-28 19:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 2246 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 63 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11536 KB; 2026-03-28 19:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 19:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:15:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 19:15:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 19:15:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 19:15:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 19:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2246 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 64 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11558 KB; 2026-03-28 19:15:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 19:08:13, To:, 2026-03-28 19:15:28, Duration (s):, 435, Events Per Second:, 0.883, Events:, 385, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 384, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52310 2026-03-28 19:15:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s905ms. 2026-03-28 19:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2246 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11328 KB; 2026-03-28 19:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2246 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11354 KB; 2026-03-28 19:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2246 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 95 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11385 KB; 2026-03-28 19:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2246 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11392 KB; 2026-03-28 19:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 19:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:20:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 19:20:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 19:20:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 19:20:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 19:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2246 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 153 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11539 KB; 2026-03-28 19:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2246 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 142 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11580 KB; 2026-03-28 19:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2246 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 91 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11567 KB; 2026-03-28 19:22:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 19:16:16, To:, 2026-03-28 19:22:28, Duration (s):, 372, Events Per Second:, 0.799, Events:, 298, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 297, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36915 2026-03-28 19:22:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s682ms. 2026-03-28 19:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 2246 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11483 KB; 2026-03-28 19:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2246 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 86 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11499 KB; 2026-03-28 19:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 19:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:25:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 19:25:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 19:25:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 19:25:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 19:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2246 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11472 KB; 2026-03-28 19:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2246 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 88 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11471 KB; 2026-03-28 19:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2246 KB; ProcessInfo: 887 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11490 KB; 2026-03-28 19:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2246 KB; ProcessInfo: 887 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11495 KB; 2026-03-28 19:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2246 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11503 KB; 2026-03-28 19:29:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 19:22:57, To:, 2026-03-28 19:29:28, Duration (s):, 391, Events Per Second:, 0.329, Events:, 129, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 128, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17874 2026-03-28 19:29:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s666ms. 2026-03-28 19:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 19:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:30:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 19:30:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 19:30:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 19:30:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 19:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2246 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11369 KB; 2026-03-28 19:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2246 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 104 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11394 KB; 2026-03-28 19:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2246 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 94 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11364 KB; 2026-03-28 19:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2687 KB; ModuleMetadata: 2246 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11361 KB; 2026-03-28 19:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 2246 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11376 KB; 2026-03-28 19:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 19:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:35:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 19:35:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 19:35:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 19:35:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 19:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 2246 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11391 KB; 2026-03-28 19:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2246 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11569 KB; 2026-03-28 19:36:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 19:30:00, To:, 2026-03-28 19:36:28, Duration (s):, 388, Events Per Second:, 0.329, Events:, 128, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 127, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20356 2026-03-28 19:36:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s728ms. 2026-03-28 19:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2246 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11417 KB; 2026-03-28 19:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2246 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11413 KB; 2026-03-28 19:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2246 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 110 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11494 KB; 2026-03-28 19:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 19:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:40:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 19:40:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 19:40:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 19:40:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 19:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2246 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11479 KB; 2026-03-28 19:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2246 KB; ProcessInfo: 868 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11491 KB; 2026-03-28 19:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2246 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; rules::ProcessConditionsCache: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11729 KB; 2026-03-28 19:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2687 KB; ModuleMetadata: 2246 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11588 KB; 2026-03-28 19:43:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 19:36:28, To:, 2026-03-28 19:43:28, Duration (s):, 420, Events Per Second:, 0.758, Events:, 319, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 316, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43411 2026-03-28 19:43:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s809ms. 2026-03-28 19:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2246 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 323 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 113 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11448 KB; 2026-03-28 19:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 19:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:45:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 19:45:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 19:45:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 19:45:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 19:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2248 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 126 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11518 KB; 2026-03-28 19:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 2248 KB; ProcessInfo: 985 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 274 KB; rules::ProcessConditionsCache: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 154 KB; BaseEvent: 63 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11890 KB; 2026-03-28 19:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2248 KB; ProcessInfo: 1150 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; TcpIpConnectionsManager: 376 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 154 KB; BaseEvent: 139 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12093 KB; 2026-03-28 19:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2248 KB; ProcessInfo: 1152 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; TcpIpConnectionsManager: 358 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 154 KB; BaseEvent: 144 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12062 KB; 2026-03-28 19:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2248 KB; ProcessInfo: 1155 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 154 KB; BaseEvent: 146 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12011 KB; 2026-03-28 19:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 19:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:50:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 19:50:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 19:50:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 19:50:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 19:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2248 KB; ProcessInfo: 1186 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 212 KB; BaseEvent: 157 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 115 KB; BatchSerializer::EventsQueueTag: 48 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12023 KB; 2026-03-28 19:50:28 7967594126c0 Info: Events Statistics, From:, 2026-03-28 19:43:30, To:, 2026-03-28 19:50:28, Duration (s):, 418, Events Per Second:, 2.383, Events:, 998, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 885, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 112, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 115645 2026-03-28 19:50:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s214ms. 2026-03-28 19:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2248 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11613 KB; 2026-03-28 19:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2248 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11512 KB; 2026-03-28 19:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2686 KB; ModuleMetadata: 2248 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 93 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11549 KB; 2026-03-28 19:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2688 KB; ModuleMetadata: 2248 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11549 KB; 2026-03-28 19:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 19:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:55:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 19:55:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 19:55:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 19:55:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 19:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 2248 KB; ProcessInfo: 957 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11792 KB; 2026-03-28 19:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2690 KB; ModuleMetadata: 2248 KB; ProcessInfo: 967 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11697 KB; 2026-03-28 19:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2248 KB; ProcessInfo: 969 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11679 KB; 2026-03-28 19:57:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 19:50:34, To:, 2026-03-28 19:57:29, Duration (s):, 415, Events Per Second:, 1.087, Events:, 451, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 450, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 54688 2026-03-28 19:57:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s524ms. 2026-03-28 19:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2248 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11457 KB; 2026-03-28 19:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2248 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 146 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11593 KB; 2026-03-28 19:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 19:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 19:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:00:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 20:00:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 20:00:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 20:00:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 20:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2248 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11563 KB; 2026-03-28 20:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2248 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11566 KB; 2026-03-28 20:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2248 KB; ProcessInfo: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11556 KB; 2026-03-28 20:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2685 KB; ModuleMetadata: 2248 KB; ProcessInfo: 941 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 139 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11611 KB; 2026-03-28 20:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 2248 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11612 KB; 2026-03-28 20:04:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 19:57:26, To:, 2026-03-28 20:04:29, Duration (s):, 423, Events Per Second:, 0.745, Events:, 315, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 244, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 35, Livegrid:, 35, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38218 2026-03-28 20:04:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s544ms. 2026-03-28 20:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 20:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:05:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 20:05:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 20:05:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 20:05:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 20:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 2248 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11394 KB; 2026-03-28 20:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 2248 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11383 KB; 2026-03-28 20:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 2248 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11371 KB; 2026-03-28 20:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2689 KB; ModuleMetadata: 2248 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11372 KB; 2026-03-28 20:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2248 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 129 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11409 KB; 2026-03-28 20:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 20:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:10:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 20:10:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 20:10:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 20:10:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 20:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2248 KB; ProcessInfo: 951 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11737 KB; 2026-03-28 20:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 2248 KB; ProcessInfo: 953 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 140 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11763 KB; 2026-03-28 20:11:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 20:03:37, To:, 2026-03-28 20:11:29, Duration (s):, 472, Events Per Second:, 0.875, Events:, 413, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 412, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52190 2026-03-28 20:11:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s244ms. 2026-03-28 20:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2764 KB; ModuleMetadata: 2248 KB; ProcessInfo: 928 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 138 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11704 KB; 2026-03-28 20:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2751 KB; ModuleMetadata: 2248 KB; ProcessInfo: 929 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 140 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11618 KB; 2026-03-28 20:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2773 KB; ModuleMetadata: 2248 KB; ProcessInfo: 929 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 140 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11634 KB; 2026-03-28 20:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 20:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:15:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 20:15:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 20:15:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 20:15:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 20:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2755 KB; ModuleMetadata: 2248 KB; ProcessInfo: 954 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 195 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11693 KB; 2026-03-28 20:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2776 KB; ModuleMetadata: 2248 KB; ProcessInfo: 954 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 142 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11689 KB; 2026-03-28 20:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2776 KB; ModuleMetadata: 2248 KB; ProcessInfo: 959 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 144 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11699 KB; 2026-03-28 20:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2248 KB; ProcessInfo: 975 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11668 KB; 2026-03-28 20:18:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 20:11:48, To:, 2026-03-28 20:18:29, Duration (s):, 401, Events Per Second:, 0.322, Events:, 129, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 126, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17861 2026-03-28 20:18:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s274ms. 2026-03-28 20:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2248 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 150 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11455 KB; 2026-03-28 20:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 20:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:20:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 20:20:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 20:20:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 20:20:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 20:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2248 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11471 KB; 2026-03-28 20:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2248 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11464 KB; 2026-03-28 20:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2248 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 156 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11472 KB; 2026-03-28 20:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2248 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 172 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11466 KB; 2026-03-28 20:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2248 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11473 KB; 2026-03-28 20:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 20:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:25:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 20:25:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 20:25:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 20:25:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 20:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2248 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 198 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11539 KB; 2026-03-28 20:25:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 20:18:28, To:, 2026-03-28 20:25:29, Duration (s):, 421, Events Per Second:, 0.264, Events:, 111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 110, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16049 2026-03-28 20:25:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s719ms. 2026-03-28 20:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2248 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 175 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11513 KB; 2026-03-28 20:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2248 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11536 KB; 2026-03-28 20:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2248 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; rules::ProcessConditionsCache: 226 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11615 KB; 2026-03-28 20:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2248 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11558 KB; 2026-03-28 20:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 20:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:30:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 20:30:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 20:30:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 20:30:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 20:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2248 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 261 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11784 KB; 2026-03-28 20:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2248 KB; ProcessInfo: 920 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 287 KB; rules::ProcessConditionsCache: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11832 KB; 2026-03-28 20:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2248 KB; ProcessInfo: 931 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11712 KB; 2026-03-28 20:32:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 20:25:36, To:, 2026-03-28 20:32:29, Duration (s):, 413, Events Per Second:, 0.867, Events:, 358, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 357, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44356 2026-03-28 20:32:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s886ms. 2026-03-28 20:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2248 KB; ProcessInfo: 868 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11605 KB; 2026-03-28 20:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2248 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 173 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11613 KB; 2026-03-28 20:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 20:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:35:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 20:35:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 20:35:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 20:35:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 20:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2814 KB; ModuleMetadata: 2248 KB; ProcessInfo: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11794 KB; 2026-03-28 20:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2248 KB; ProcessInfo: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 171 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11655 KB; 2026-03-28 20:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2248 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11725 KB; 2026-03-28 20:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2248 KB; ProcessInfo: 966 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11736 KB; 2026-03-28 20:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2248 KB; ProcessInfo: 1014 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11786 KB; 2026-03-28 20:39:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 20:33:00, To:, 2026-03-28 20:39:29, Duration (s):, 389, Events Per Second:, 1.038, Events:, 404, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 401, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49646 2026-03-28 20:39:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s999ms. 2026-03-28 20:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 20:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:40:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 20:40:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 20:40:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 20:40:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 20:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2248 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 241 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11683 KB; 2026-03-28 20:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2248 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11615 KB; 2026-03-28 20:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2248 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11608 KB; 2026-03-28 20:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2248 KB; ProcessInfo: 906 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 210 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11651 KB; 2026-03-28 20:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2248 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; rules::ProcessConditionsCache: 226 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11680 KB; 2026-03-28 20:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 20:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:45:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 20:45:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 20:45:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 20:45:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 20:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2248 KB; ProcessInfo: 928 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 204 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11675 KB; 2026-03-28 20:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2248 KB; ProcessInfo: 931 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; rules::ProcessConditionsCache: 206 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11691 KB; 2026-03-28 20:46:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 20:39:24, To:, 2026-03-28 20:46:29, Duration (s):, 425, Events Per Second:, 0.421, Events:, 179, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 178, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24635 2026-03-28 20:46:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s233ms. 2026-03-28 20:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2248 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::ProcessConditionsCache: 211 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11541 KB; 2026-03-28 20:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2248 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11719 KB; 2026-03-28 20:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2248 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 228 KB; rules::ProcessConditionsCache: 211 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11642 KB; 2026-03-28 20:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 20:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:50:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 20:50:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 20:50:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 20:50:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 20:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2248 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; rules::ProcessConditionsCache: 222 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11683 KB; 2026-03-28 20:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2248 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11644 KB; 2026-03-28 20:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2248 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 198 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11609 KB; 2026-03-28 20:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2248 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 195 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11587 KB; 2026-03-28 20:53:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 20:46:31, To:, 2026-03-28 20:53:29, Duration (s):, 418, Events Per Second:, 0.421, Events:, 176, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 175, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23704 2026-03-28 20:53:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s709ms. 2026-03-28 20:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2248 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; rules::ProcessConditionsCache: 198 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11470 KB; 2026-03-28 20:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 20:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:55:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 20:55:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 20:55:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 20:55:03 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 20:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2248 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11590 KB; 2026-03-28 20:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2248 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 198 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11524 KB; 2026-03-28 20:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2248 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11553 KB; 2026-03-28 20:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2248 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11552 KB; 2026-03-28 20:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2248 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 202 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11527 KB; 2026-03-28 20:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 20:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 20:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:00:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 21:00:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 21:00:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 21:00:03 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 21:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2248 KB; ProcessInfo: 906 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 397 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11917 KB; 2026-03-28 21:00:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 20:54:00, To:, 2026-03-28 21:00:29, Duration (s):, 389, Events Per Second:, 0.712, Events:, 277, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 276, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41428 2026-03-28 21:00:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s800ms. 2026-03-28 21:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2248 KB; ProcessInfo: 945 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; rules::ProcessConditionsCache: 344 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11909 KB; 2026-03-28 21:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2248 KB; ProcessInfo: 945 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 262 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11809 KB; 2026-03-28 21:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2248 KB; ProcessInfo: 947 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 261 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11794 KB; 2026-03-28 21:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2248 KB; ProcessInfo: 947 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11747 KB; 2026-03-28 21:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 21:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:05:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 21:05:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 21:05:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 21:05:03 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 21:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2248 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11727 KB; 2026-03-28 21:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2248 KB; ProcessInfo: 951 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11737 KB; 2026-03-28 21:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2248 KB; ProcessInfo: 953 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11739 KB; 2026-03-28 21:07:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 21:00:21, To:, 2026-03-28 21:07:29, Duration (s):, 428, Events Per Second:, 0.724, Events:, 310, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 309, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46558 2026-03-28 21:07:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s842ms. 2026-03-28 21:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2248 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11516 KB; 2026-03-28 21:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2248 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11606 KB; 2026-03-28 21:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 21:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:10:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 21:10:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 21:10:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 21:10:03 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 21:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2248 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11630 KB; 2026-03-28 21:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2248 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11644 KB; 2026-03-28 21:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2248 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11651 KB; 2026-03-28 21:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2248 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11650 KB; 2026-03-28 21:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2248 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 395 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11648 KB; 2026-03-28 21:14:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 21:07:25, To:, 2026-03-28 21:14:29, Duration (s):, 424, Events Per Second:, 0.448, Events:, 190, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 189, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25887 2026-03-28 21:14:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s051ms. 2026-03-28 21:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 21:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:15:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 21:15:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 21:15:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 21:15:03 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 21:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2251 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 325 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11670 KB; 2026-03-28 21:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2251 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11584 KB; 2026-03-28 21:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2251 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 281 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11617 KB; 2026-03-28 21:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2251 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 279 KB; TcpIpConnectionsManager: 213 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11640 KB; 2026-03-28 21:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2251 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11626 KB; 2026-03-28 21:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 21:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:20:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 21:20:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 21:20:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 21:20:04 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 21:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2251 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11630 KB; 2026-03-28 21:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2251 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 286 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11646 KB; 2026-03-28 21:21:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 21:15:00, To:, 2026-03-28 21:21:29, Duration (s):, 389, Events Per Second:, 0.403, Events:, 157, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 156, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20997 2026-03-28 21:21:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s603ms. 2026-03-28 21:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 2251 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11564 KB; 2026-03-28 21:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2251 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11579 KB; 2026-03-28 21:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2251 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 371 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11790 KB; 2026-03-28 21:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 21:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:25:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 21:25:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 21:25:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 21:25:04 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 21:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2251 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 290 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11705 KB; 2026-03-28 21:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2251 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 316 KB; TcpIpConnectionsManager: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11825 KB; 2026-03-28 21:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2251 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 290 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11778 KB; 2026-03-28 21:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2251 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 292 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11757 KB; 2026-03-28 21:28:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 21:22:22, To:, 2026-03-28 21:28:29, Duration (s):, 367, Events Per Second:, 0.917, Events:, 337, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 336, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40957 2026-03-28 21:28:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s673ms. 2026-03-28 21:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2251 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11598 KB; 2026-03-28 21:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 21:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:30:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 21:30:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 21:30:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 21:30:05 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 21:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2251 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11668 KB; 2026-03-28 21:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 2251 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11705 KB; 2026-03-28 21:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2746 KB; ModuleMetadata: 2251 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11706 KB; 2026-03-28 21:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2251 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11676 KB; 2026-03-28 21:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2251 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11693 KB; 2026-03-28 21:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 21:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:35:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 21:35:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 21:35:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 21:35:06 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 21:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2251 KB; ProcessInfo: 909 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11585 KB; 2026-03-28 21:35:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 21:28:36, To:, 2026-03-28 21:35:29, Duration (s):, 413, Events Per Second:, 0.498, Events:, 206, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 205, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28764 2026-03-28 21:35:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s784ms. 2026-03-28 21:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2251 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11385 KB; 2026-03-28 21:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2251 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11438 KB; 2026-03-28 21:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2251 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11516 KB; 2026-03-28 21:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2251 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11458 KB; 2026-03-28 21:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 21:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:40:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 21:40:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 21:40:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 21:40:06 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 21:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2251 KB; ProcessInfo: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 45 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11518 KB; 2026-03-28 21:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2251 KB; ProcessInfo: 931 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11530 KB; 2026-03-28 21:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2251 KB; ProcessInfo: 987 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11721 KB; 2026-03-28 21:42:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 21:35:29, To:, 2026-03-28 21:42:29, Duration (s):, 420, Events Per Second:, 1.047, Events:, 440, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 439, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57637 2026-03-28 21:42:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s624ms. 2026-03-28 21:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2251 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11415 KB; 2026-03-28 21:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2251 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11462 KB; 2026-03-28 21:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 21:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:45:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 21:45:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 21:45:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 21:45:06 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 21:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2251 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 54 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11445 KB; 2026-03-28 21:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2251 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11460 KB; 2026-03-28 21:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2251 KB; ProcessInfo: 991 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 154 KB; BaseEvent: 66 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11777 KB; 2026-03-28 21:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2251 KB; ProcessInfo: 1038 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 154 KB; BaseEvent: 89 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11945 KB; 2026-03-28 21:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2251 KB; ProcessInfo: 1039 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 154 KB; BaseEvent: 89 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11974 KB; 2026-03-28 21:49:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 21:42:29, To:, 2026-03-28 21:49:29, Duration (s):, 420, Events Per Second:, 1.377, Events:, 579, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 508, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 70, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 69719 2026-03-28 21:49:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s809ms. 2026-03-28 21:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 21:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:50:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 21:50:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 21:50:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 21:50:07 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 21:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2251 KB; ProcessInfo: 947 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 212 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11697 KB; 2026-03-28 21:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2251 KB; ProcessInfo: 970 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11721 KB; 2026-03-28 21:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2251 KB; ProcessInfo: 992 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 221 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11750 KB; 2026-03-28 21:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2251 KB; ProcessInfo: 994 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11734 KB; 2026-03-28 21:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2251 KB; ProcessInfo: 1092 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 319 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 154 KB; BaseEvent: 61 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12026 KB; 2026-03-28 21:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 21:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:55:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 21:55:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 21:55:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 21:55:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 21:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2251 KB; ProcessInfo: 1095 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 154 KB; BaseEvent: 63 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12009 KB; 2026-03-28 21:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2251 KB; ProcessInfo: 1095 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 322 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 154 KB; BaseEvent: 63 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12011 KB; 2026-03-28 21:56:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 21:49:41, To:, 2026-03-28 21:56:29, Duration (s):, 408, Events Per Second:, 1.014, Events:, 414, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 365, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 48, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 50317 2026-03-28 21:56:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s771ms. 2026-03-28 21:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2251 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11683 KB; 2026-03-28 21:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2251 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 325 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11683 KB; 2026-03-28 21:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2251 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 325 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11686 KB; 2026-03-28 21:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 21:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 21:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:00:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 22:00:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 22:00:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 22:00:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 22:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2253 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 338 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11724 KB; 2026-03-28 22:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2253 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 338 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11737 KB; 2026-03-28 22:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2253 KB; ProcessInfo: 928 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 373 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11844 KB; 2026-03-28 22:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2253 KB; ProcessInfo: 928 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11798 KB; 2026-03-28 22:03:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 21:56:42, To:, 2026-03-28 22:03:29, Duration (s):, 407, Events Per Second:, 0.366, Events:, 149, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 143, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20683 2026-03-28 22:03:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s660ms. 2026-03-28 22:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2253 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11651 KB; 2026-03-28 22:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 22:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:05:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 22:05:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 22:05:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 22:05:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 22:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2253 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11637 KB; 2026-03-28 22:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2253 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 380 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11725 KB; 2026-03-28 22:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2253 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11730 KB; 2026-03-28 22:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2253 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11728 KB; 2026-03-28 22:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2253 KB; ProcessInfo: 900 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 345 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11781 KB; 2026-03-28 22:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 22:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:10:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 22:10:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 22:10:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 22:10:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 22:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2253 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 345 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11760 KB; 2026-03-28 22:10:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 22:03:31, To:, 2026-03-28 22:10:29, Duration (s):, 418, Events Per Second:, 0.624, Events:, 261, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 260, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33361 2026-03-28 22:10:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s672ms. 2026-03-28 22:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2253 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11652 KB; 2026-03-28 22:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2253 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11657 KB; 2026-03-28 22:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 2253 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11646 KB; 2026-03-28 22:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2253 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11649 KB; 2026-03-28 22:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 22:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:15:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 22:15:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 22:15:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 22:15:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 22:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2253 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11660 KB; 2026-03-28 22:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2253 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11663 KB; 2026-03-28 22:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2253 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 355 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11671 KB; 2026-03-28 22:17:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 22:10:46, To:, 2026-03-28 22:17:29, Duration (s):, 403, Events Per Second:, 0.042, Events:, 17, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 16, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 3223 2026-03-28 22:17:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s368ms. 2026-03-28 22:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2253 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 355 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11636 KB; 2026-03-28 22:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2253 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 357 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11626 KB; 2026-03-28 22:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 22:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:20:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 22:20:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 22:20:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 22:20:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 22:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2253 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 366 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11650 KB; 2026-03-28 22:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2253 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 363 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11651 KB; 2026-03-28 22:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2253 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11486 KB; 2026-03-28 22:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2253 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11434 KB; 2026-03-28 22:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2253 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11417 KB; 2026-03-28 22:24:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 22:18:44, To:, 2026-03-28 22:24:29, Duration (s):, 345, Events Per Second:, 0.521, Events:, 180, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 177, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23035 2026-03-28 22:24:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s672ms. 2026-03-28 22:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 22:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:25:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 22:25:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 22:25:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 22:25:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 22:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2253 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11374 KB; 2026-03-28 22:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2253 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11357 KB; 2026-03-28 22:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2253 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11356 KB; 2026-03-28 22:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2253 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11346 KB; 2026-03-28 22:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2253 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11351 KB; 2026-03-28 22:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 22:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:30:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 22:30:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 22:30:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 22:30:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 22:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2253 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11381 KB; 2026-03-28 22:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2253 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11393 KB; 2026-03-28 22:31:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 22:24:30, To:, 2026-03-28 22:31:29, Duration (s):, 419, Events Per Second:, 0.155, Events:, 65, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 64, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 11047 2026-03-28 22:31:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s328ms. 2026-03-28 22:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2253 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11357 KB; 2026-03-28 22:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2253 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11370 KB; 2026-03-28 22:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2253 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11339 KB; 2026-03-28 22:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 22:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:35:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 22:35:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 22:35:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 22:35:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 22:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2253 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11342 KB; 2026-03-28 22:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2253 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11344 KB; 2026-03-28 22:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2253 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11350 KB; 2026-03-28 22:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2253 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 134 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11579 KB; 2026-03-28 22:38:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 22:31:32, To:, 2026-03-28 22:38:29, Duration (s):, 417, Events Per Second:, 0.711, Events:, 297, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 251, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 45, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36807 2026-03-28 22:38:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s427ms. 2026-03-28 22:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2253 KB; ProcessInfo: 1056 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 320 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; cloudutils::CloudData: 155 KB; BaseEvent: 78 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12092 KB; 2026-03-28 22:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 22:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:40:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 22:40:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 22:40:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 22:40:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 22:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2253 KB; ProcessInfo: 1132 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; rules::ProcessConditionsCache: 379 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 155 KB; BaseEvent: 108 KB; ProcessInfoCommandLineTag: 52 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12284 KB; 2026-03-28 22:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2253 KB; ProcessInfo: 1254 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; TcpIpConnectionsManager: 338 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; BaseEvent: 165 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12223 KB; 2026-03-28 22:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2253 KB; ProcessInfo: 1255 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; BaseEvent: 165 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12164 KB; 2026-03-28 22:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2253 KB; ProcessInfo: 1255 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; BaseEvent: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12109 KB; 2026-03-28 22:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2253 KB; ProcessInfo: 1255 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; BaseEvent: 168 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12063 KB; 2026-03-28 22:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 22:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:45:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 22:45:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 22:45:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 22:45:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 22:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2254 KB; ProcessInfo: 1258 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 170 KB; BaseEvent: 169 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12083 KB; 2026-03-28 22:45:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 22:38:37, To:, 2026-03-28 22:45:29, Duration (s):, 412, Events Per Second:, 2.558, Events:, 1055, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 903, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 149, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 121446 2026-03-28 22:45:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s036ms. 2026-03-28 22:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2254 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11373 KB; 2026-03-28 22:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2254 KB; ProcessInfo: 778 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 117 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11390 KB; 2026-03-28 22:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2254 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 223 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11553 KB; 2026-03-28 22:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2254 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11493 KB; 2026-03-28 22:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 22:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:50:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 22:50:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 22:50:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 22:50:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 22:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2254 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11516 KB; 2026-03-28 22:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2254 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 121 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11498 KB; 2026-03-28 22:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2254 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11484 KB; 2026-03-28 22:52:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 22:46:09, To:, 2026-03-28 22:52:29, Duration (s):, 380, Events Per Second:, 0.505, Events:, 192, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 191, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24702 2026-03-28 22:52:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s671ms. 2026-03-28 22:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2691 KB; ModuleMetadata: 2254 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11427 KB; 2026-03-28 22:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2254 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11414 KB; 2026-03-28 22:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 22:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:55:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 22:55:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 22:55:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 22:55:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 22:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2254 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11424 KB; 2026-03-28 22:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2254 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11412 KB; 2026-03-28 22:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2254 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11412 KB; 2026-03-28 22:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2254 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11415 KB; 2026-03-28 22:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2254 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 127 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11451 KB; 2026-03-28 22:59:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 22:52:32, To:, 2026-03-28 22:59:29, Duration (s):, 417, Events Per Second:, 0.144, Events:, 60, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 59, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10256 2026-03-28 22:59:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s943ms. 2026-03-28 22:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 22:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 22:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:00:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 23:00:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 23:00:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 23:00:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 23:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2254 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 142 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11447 KB; 2026-03-28 23:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2254 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; rules::ProcessConditionsCache: 216 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11623 KB; 2026-03-28 23:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2254 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 142 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11531 KB; 2026-03-28 23:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2254 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 144 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11525 KB; 2026-03-28 23:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2254 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 142 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11570 KB; 2026-03-28 23:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 23:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:05:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 23:05:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 23:05:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 23:05:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 23:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2254 KB; ProcessInfo: 887 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 146 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11600 KB; 2026-03-28 23:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2254 KB; ProcessInfo: 887 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 142 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11595 KB; 2026-03-28 23:06:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 22:59:36, To:, 2026-03-28 23:06:29, Duration (s):, 413, Events Per Second:, 0.735, Events:, 304, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 303, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38041 2026-03-28 23:06:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s604ms. 2026-03-28 23:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2254 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11562 KB; 2026-03-28 23:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2254 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 144 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11580 KB; 2026-03-28 23:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2254 KB; ProcessInfo: 923 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 148 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11655 KB; 2026-03-28 23:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 23:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:10:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 23:10:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 23:10:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 23:10:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 23:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2254 KB; ProcessInfo: 951 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 153 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11693 KB; 2026-03-28 23:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2254 KB; ProcessInfo: 953 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 150 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11670 KB; 2026-03-28 23:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2254 KB; ProcessInfo: 953 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 150 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11670 KB; 2026-03-28 23:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2254 KB; ProcessInfo: 953 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 150 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11640 KB; 2026-03-28 23:13:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 23:06:29, To:, 2026-03-28 23:13:29, Duration (s):, 420, Events Per Second:, 0.844, Events:, 355, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 354, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44274 2026-03-28 23:13:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s813ms. 2026-03-28 23:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2254 KB; ProcessInfo: 778 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 20 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11441 KB; 2026-03-28 23:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 23:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:15:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 23:15:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 23:15:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 23:15:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 23:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 2254 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 186 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; ExtendedTcpIpConnectionInfo: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11483 KB; 2026-03-28 23:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2254 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 186 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; ExtendedTcpIpConnectionInfo: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11507 KB; 2026-03-28 23:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2755 KB; ModuleMetadata: 2254 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; ExtendedTcpIpConnectionInfo: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11560 KB; 2026-03-28 23:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2773 KB; ModuleMetadata: 2254 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 155 KB; ExtendedTcpIpConnectionInfo: 48 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11585 KB; 2026-03-28 23:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2782 KB; ModuleMetadata: 2254 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 210 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 155 KB; ExtendedTcpIpConnectionInfo: 51 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11611 KB; 2026-03-28 23:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 23:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:20:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 23:20:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 23:20:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 23:20:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 23:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2254 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 249 KB; rules::ProcessConditionsCache: 242 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 155 KB; ExtendedTcpIpConnectionInfo: 51 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11729 KB; 2026-03-28 23:20:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 23:13:28, To:, 2026-03-28 23:20:29, Duration (s):, 421, Events Per Second:, 0.451, Events:, 190, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 187, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26471 2026-03-28 23:20:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s676ms. 2026-03-28 23:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2254 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 155 KB; ExtendedTcpIpConnectionInfo: 51 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11599 KB; 2026-03-28 23:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2254 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 155 KB; ExtendedTcpIpConnectionInfo: 51 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11597 KB; 2026-03-28 23:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2254 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 203 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11512 KB; 2026-03-28 23:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2695 KB; ModuleMetadata: 2254 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 182 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11509 KB; 2026-03-28 23:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 23:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:25:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 23:25:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 23:25:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 23:25:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 23:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2254 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 182 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11509 KB; 2026-03-28 23:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2254 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 177 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11516 KB; 2026-03-28 23:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2254 KB; ProcessInfo: 868 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 195 KB; rules::ProcessConditionsCache: 172 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11558 KB; 2026-03-28 23:27:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 23:20:29, To:, 2026-03-28 23:27:29, Duration (s):, 420, Events Per Second:, 0.319, Events:, 134, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 133, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21021 2026-03-28 23:27:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s711ms. 2026-03-28 23:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2254 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; rules::ProcessConditionsCache: 171 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11515 KB; 2026-03-28 23:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2254 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 171 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11520 KB; 2026-03-28 23:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 23:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:30:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 23:30:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 23:30:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 23:30:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 23:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2254 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 195 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11542 KB; 2026-03-28 23:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2254 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; rules::ProcessConditionsCache: 182 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11541 KB; 2026-03-28 23:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2254 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11617 KB; 2026-03-28 23:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2692 KB; ModuleMetadata: 2254 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 213 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11590 KB; 2026-03-28 23:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2254 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 203 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11587 KB; 2026-03-28 23:34:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 23:27:43, To:, 2026-03-28 23:34:29, Duration (s):, 406, Events Per Second:, 0.480, Events:, 195, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 194, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25516 2026-03-28 23:34:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s672ms. 2026-03-28 23:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 23:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:35:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 23:35:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 23:35:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 23:35:13 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 23:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2254 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 185 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11504 KB; 2026-03-28 23:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2254 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; rules::ProcessConditionsCache: 186 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11496 KB; 2026-03-28 23:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2254 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 184 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11498 KB; 2026-03-28 23:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2254 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 184 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11505 KB; 2026-03-28 23:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2254 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 190 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11582 KB; 2026-03-28 23:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 23:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:40:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 23:40:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 23:40:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 23:40:13 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 23:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2254 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; rules::ProcessConditionsCache: 197 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11597 KB; 2026-03-28 23:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2254 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; rules::ProcessConditionsCache: 195 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11595 KB; 2026-03-28 23:41:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 23:34:25, To:, 2026-03-28 23:41:29, Duration (s):, 424, Events Per Second:, 0.367, Events:, 156, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 153, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21327 2026-03-28 23:41:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s669ms. 2026-03-28 23:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2254 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 195 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11543 KB; 2026-03-28 23:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2254 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; rules::ProcessConditionsCache: 195 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11531 KB; 2026-03-28 23:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2254 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; rules::ProcessConditionsCache: 195 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11535 KB; 2026-03-28 23:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 23:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:45:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 23:45:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 23:45:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 23:45:13 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 23:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2254 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; rules::ProcessConditionsCache: 226 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11600 KB; 2026-03-28 23:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2254 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; rules::ProcessConditionsCache: 197 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11539 KB; 2026-03-28 23:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2254 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 207 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11585 KB; 2026-03-28 23:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2254 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 203 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11587 KB; 2026-03-28 23:48:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 23:44:39, To:, 2026-03-28 23:48:29, Duration (s):, 230, Events Per Second:, 0.443, Events:, 102, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 101, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14551 2026-03-28 23:48:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s521ms. 2026-03-28 23:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2254 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11524 KB; 2026-03-28 23:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 23:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:50:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 23:50:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 23:50:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 23:50:13 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 23:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2254 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11503 KB; 2026-03-28 23:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2254 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11636 KB; 2026-03-28 23:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2254 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; rules::ProcessConditionsCache: 207 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11546 KB; 2026-03-28 23:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2693 KB; ModuleMetadata: 2254 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11599 KB; 2026-03-28 23:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2694 KB; ModuleMetadata: 2254 KB; ProcessInfo: 940 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 310 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 154 KB; BaseEvent: 56 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11875 KB; 2026-03-28 23:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 23:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:55:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-28 23:55:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-28 23:55:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-28 23:55:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-28 23:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2696 KB; ModuleMetadata: 2254 KB; ProcessInfo: 1086 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 154 KB; BaseEvent: 129 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11906 KB; 2026-03-28 23:55:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 23:48:17, To:, 2026-03-28 23:55:29, Duration (s):, 432, Events Per Second:, 1.958, Events:, 847, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 718, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 128, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 97978 2026-03-28 23:55:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s758ms. 2026-03-28 23:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2254 KB; ProcessInfo: 1057 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11756 KB; 2026-03-28 23:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2254 KB; ProcessInfo: 1058 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11715 KB; 2026-03-28 23:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2254 KB; ProcessInfo: 1058 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11657 KB; 2026-03-28 23:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2254 KB; ProcessInfo: 1061 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11655 KB; 2026-03-28 23:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-28 23:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-28 23:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)