| Server IP : 172.67.191.97 / Your IP : 104.23.243.197 Web Server : Apache/2.4.63 (Ubuntu) System : Linux adminpruebas-Virtual-Machine 6.14.0-37-generic #37-Ubuntu SMP PREEMPT_DYNAMIC Fri Nov 14 22:10:32 UTC 2025 x86_64 User : www-data ( 33) PHP Version : 8.4.5 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /var/log/eset/eei/ |
Upload File : |
Version: 2.8.5555 (Oct 13 2025 18:38:28) Compiled with: Clang Version: 18.1.3 Npm: 10.8.2 HardwareInfo: CPU: IntelXeon, cores: 240, RAM: 7GB TelemetryId: Server d38ecbca8f660598256b227c9815089ffeddc553 2026-03-29 00:00:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 00:00:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 00:00:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 00:00:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 00:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2254 KB; ProcessInfo: 1089 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 133 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11765 KB; 2026-03-29 00:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2254 KB; ProcessInfo: 1213 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12020 KB; 2026-03-29 00:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2254 KB; ProcessInfo: 1229 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 175 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12034 KB; 2026-03-29 00:02:29 7967594126c0 Info: Events Statistics, From:, 2026-03-28 23:55:46, To:, 2026-03-29 00:02:29, Duration (s):, 403, Events Per Second:, 1.130, Events:, 456, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 445, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56832 2026-03-29 00:02:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s280ms. 2026-03-29 00:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2254 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11672 KB; 2026-03-29 00:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2254 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 197 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11638 KB; 2026-03-29 00:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 00:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:05:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 00:05:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 00:05:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 00:05:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 00:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2254 KB; ProcessInfo: 964 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11714 KB; 2026-03-29 00:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2254 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11707 KB; 2026-03-29 00:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2254 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11707 KB; 2026-03-29 00:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2254 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 198 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11702 KB; 2026-03-29 00:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2254 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; rules::ProcessConditionsCache: 190 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11673 KB; 2026-03-29 00:09:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 00:02:45, To:, 2026-03-29 00:09:29, Duration (s):, 404, Events Per Second:, 0.260, Events:, 105, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 104, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15420 2026-03-29 00:09:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s407ms. 2026-03-29 00:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 00:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:10:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 00:10:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 00:10:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 00:10:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 00:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2254 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; rules::ProcessConditionsCache: 190 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11442 KB; 2026-03-29 00:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2254 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11683 KB; 2026-03-29 00:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2254 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11692 KB; 2026-03-29 00:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2254 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11683 KB; 2026-03-29 00:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2254 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11728 KB; 2026-03-29 00:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 00:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:15:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 00:15:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 00:15:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 00:15:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 00:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2257 KB; ProcessInfo: 917 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11707 KB; 2026-03-29 00:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2257 KB; ProcessInfo: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11720 KB; 2026-03-29 00:16:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 00:06:11, To:, 2026-03-29 00:16:29, Duration (s):, 618, Events Per Second:, 0.606, Events:, 375, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 374, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47592 2026-03-29 00:16:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s543ms. 2026-03-29 00:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2257 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11557 KB; 2026-03-29 00:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2257 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 258 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11683 KB; 2026-03-29 00:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2257 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; TcpIpConnectionsManager: 248 KB; rules::ProcessConditionsCache: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11705 KB; 2026-03-29 00:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 00:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:20:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 00:20:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 00:20:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 00:20:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 00:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2257 KB; ProcessInfo: 882 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; TcpIpConnectionsManager: 246 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11719 KB; 2026-03-29 00:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2257 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11700 KB; 2026-03-29 00:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2257 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11667 KB; 2026-03-29 00:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2257 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11677 KB; 2026-03-29 00:23:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 00:16:36, To:, 2026-03-29 00:23:29, Duration (s):, 413, Events Per Second:, 0.597, Events:, 247, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 246, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30918 2026-03-29 00:23:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s659ms. 2026-03-29 00:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2257 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11525 KB; 2026-03-29 00:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 00:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:25:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 00:25:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 00:25:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 00:25:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 00:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2257 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 240 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11537 KB; 2026-03-29 00:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2257 KB; ProcessInfo: 998 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 361 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11979 KB; 2026-03-29 00:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2257 KB; ProcessInfo: 998 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 325 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11935 KB; 2026-03-29 00:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2257 KB; ProcessInfo: 998 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11937 KB; 2026-03-29 00:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2257 KB; ProcessInfo: 998 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11926 KB; 2026-03-29 00:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 00:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:30:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 00:30:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 00:30:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 00:30:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 00:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2257 KB; ProcessInfo: 1004 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 330 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 66 KB; BaseEvent: 49 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11934 KB; 2026-03-29 00:30:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 00:23:34, To:, 2026-03-29 00:30:29, Duration (s):, 415, Events Per Second:, 1.377, Events:, 572, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 551, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 10, Livegrid:, 10, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 70438 2026-03-29 00:30:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s326ms. 2026-03-29 00:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2257 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11620 KB; 2026-03-29 00:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2257 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 330 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11626 KB; 2026-03-29 00:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2257 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11612 KB; 2026-03-29 00:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2257 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 330 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11621 KB; 2026-03-29 00:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 00:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:35:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 00:35:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 00:35:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 00:35:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 00:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2257 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 332 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11631 KB; 2026-03-29 00:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2257 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 332 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11632 KB; 2026-03-29 00:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2257 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 332 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11634 KB; 2026-03-29 00:37:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 00:30:55, To:, 2026-03-29 00:37:29, Duration (s):, 394, Events Per Second:, 0.061, Events:, 24, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 23, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 5256 2026-03-29 00:37:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s298ms. 2026-03-29 00:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2257 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 332 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11631 KB; 2026-03-29 00:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2257 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 336 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11700 KB; 2026-03-29 00:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 00:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:40:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 00:40:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 00:40:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 00:40:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 00:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2257 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11718 KB; 2026-03-29 00:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2257 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11770 KB; 2026-03-29 00:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2257 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 358 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11826 KB; 2026-03-29 00:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2257 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 358 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11826 KB; 2026-03-29 00:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2257 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 358 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11826 KB; 2026-03-29 00:44:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 00:37:30, To:, 2026-03-29 00:44:29, Duration (s):, 419, Events Per Second:, 0.839, Events:, 352, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 245, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 53, Livegrid:, 53, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41943 2026-03-29 00:44:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s816ms. 2026-03-29 00:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 00:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:45:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 00:45:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 00:45:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 00:45:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 00:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2259 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 359 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11646 KB; 2026-03-29 00:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2259 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 359 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11646 KB; 2026-03-29 00:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2259 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 379 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11683 KB; 2026-03-29 00:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2259 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 379 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11686 KB; 2026-03-29 00:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2259 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 379 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11689 KB; 2026-03-29 00:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 00:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:50:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 00:50:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 00:50:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 00:50:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 00:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2259 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 381 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11695 KB; 2026-03-29 00:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2259 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 388 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11718 KB; 2026-03-29 00:51:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 00:41:21, To:, 2026-03-29 00:51:29, Duration (s):, 608, Events Per Second:, 0.108, Events:, 66, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 61, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12190 2026-03-29 00:51:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s727ms. 2026-03-29 00:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2259 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 390 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11723 KB; 2026-03-29 00:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2259 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 388 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11727 KB; 2026-03-29 00:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2746 KB; ModuleMetadata: 2259 KB; ProcessInfo: 954 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 155 KB; BaseEvent: 80 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11858 KB; 2026-03-29 00:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 00:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:55:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 00:55:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 00:55:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 00:55:16 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 00:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2749 KB; ModuleMetadata: 2259 KB; ProcessInfo: 1029 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; TcpIpConnectionsManager: 271 KB; rules::ProcessConditionsCache: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; cloudutils::CloudData: 155 KB; BaseEvent: 115 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12093 KB; 2026-03-29 00:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2750 KB; ModuleMetadata: 2259 KB; ProcessInfo: 1029 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; TcpIpConnectionsManager: 269 KB; rules::ProcessConditionsCache: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; cloudutils::CloudData: 155 KB; BaseEvent: 115 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12099 KB; 2026-03-29 00:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2259 KB; ProcessInfo: 1036 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 155 KB; BaseEvent: 118 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12027 KB; 2026-03-29 00:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2260 KB; ProcessInfo: 1039 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 155 KB; BaseEvent: 124 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12024 KB; 2026-03-29 00:58:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 00:51:56, To:, 2026-03-29 00:58:29, Duration (s):, 393, Events Per Second:, 1.860, Events:, 732, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 581, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 17, Livegrid:, 17, OriginUrl:, 0, Alarms:, 116, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 84529 2026-03-29 00:58:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s210ms. 2026-03-29 00:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2759 KB; ModuleMetadata: 2260 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11639 KB; 2026-03-29 00:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 00:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 00:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:00:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 01:00:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 01:00:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 01:00:16 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 01:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2762 KB; ModuleMetadata: 2260 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11670 KB; 2026-03-29 01:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2762 KB; ModuleMetadata: 2260 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11658 KB; 2026-03-29 01:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2260 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11661 KB; 2026-03-29 01:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2765 KB; ModuleMetadata: 2260 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 286 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11670 KB; 2026-03-29 01:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2765 KB; ModuleMetadata: 2260 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11666 KB; 2026-03-29 01:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 01:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:05:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 01:05:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 01:05:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 01:05:16 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 01:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2260 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11676 KB; 2026-03-29 01:05:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 00:58:42, To:, 2026-03-29 01:05:29, Duration (s):, 407, Events Per Second:, 0.118, Events:, 48, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 47, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8638 2026-03-29 01:05:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s529ms. 2026-03-29 01:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2768 KB; ModuleMetadata: 2260 KB; ProcessInfo: 778 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11644 KB; 2026-03-29 01:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2757 KB; ModuleMetadata: 2260 KB; ProcessInfo: 778 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11632 KB; 2026-03-29 01:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2754 KB; ModuleMetadata: 2260 KB; ProcessInfo: 778 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11632 KB; 2026-03-29 01:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2758 KB; ModuleMetadata: 2260 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11702 KB; 2026-03-29 01:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 01:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:10:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 01:10:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 01:10:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 01:10:16 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 01:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2759 KB; ModuleMetadata: 2260 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 299 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11720 KB; 2026-03-29 01:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2260 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 360 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11904 KB; 2026-03-29 01:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2260 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 325 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11899 KB; 2026-03-29 01:12:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 01:09:00, To:, 2026-03-29 01:12:29, Duration (s):, 209, Events Per Second:, 1.398, Events:, 293, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 292, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38346 2026-03-29 01:12:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s977ms. 2026-03-29 01:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2260 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 303 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11770 KB; 2026-03-29 01:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2260 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 301 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11752 KB; 2026-03-29 01:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 01:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:15:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 01:15:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 01:15:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 01:15:16 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 01:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2262 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11741 KB; 2026-03-29 01:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2747 KB; ModuleMetadata: 2262 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11720 KB; 2026-03-29 01:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2262 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 307 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11719 KB; 2026-03-29 01:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2262 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 307 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11723 KB; 2026-03-29 01:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2262 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 305 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11722 KB; 2026-03-29 01:19:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 01:12:29, To:, 2026-03-29 01:19:29, Duration (s):, 420, Events Per Second:, 0.143, Events:, 60, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 59, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 11097 2026-03-29 01:19:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s867ms. 2026-03-29 01:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 01:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:20:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 01:20:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 01:20:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 01:20:17 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 01:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2262 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 311 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11640 KB; 2026-03-29 01:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2262 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 311 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11640 KB; 2026-03-29 01:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2739 KB; ModuleMetadata: 2262 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 337 KB; CacheEntry: 325 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11765 KB; 2026-03-29 01:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2262 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 311 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11739 KB; 2026-03-29 01:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2262 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 311 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11743 KB; 2026-03-29 01:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 01:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:25:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 01:25:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 01:25:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 01:25:17 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 01:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 2262 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 313 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11714 KB; 2026-03-29 01:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2262 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 326 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11744 KB; 2026-03-29 01:26:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 01:20:09, To:, 2026-03-29 01:26:29, Duration (s):, 380, Events Per Second:, 0.468, Events:, 178, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 177, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23513 2026-03-29 01:26:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s675ms. 2026-03-29 01:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2262 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11644 KB; 2026-03-29 01:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 2262 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11656 KB; 2026-03-29 01:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 2262 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11649 KB; 2026-03-29 01:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 01:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:30:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 01:30:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 01:30:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 01:30:17 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 01:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2264 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11831 KB; 2026-03-29 01:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2264 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 326 KB; CacheEntry: 325 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11774 KB; 2026-03-29 01:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2264 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 326 KB; CacheEntry: 325 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11780 KB; 2026-03-29 01:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2264 KB; ProcessInfo: 868 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 326 KB; CacheEntry: 325 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11796 KB; 2026-03-29 01:33:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 01:26:32, To:, 2026-03-29 01:33:29, Duration (s):, 417, Events Per Second:, 0.500, Events:, 209, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 208, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26420 2026-03-29 01:33:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s727ms. 2026-03-29 01:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2264 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11698 KB; 2026-03-29 01:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 01:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:35:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 01:35:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 01:35:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 01:35:17 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 01:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2264 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 330 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11694 KB; 2026-03-29 01:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 2264 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11685 KB; 2026-03-29 01:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 2264 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 330 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11715 KB; 2026-03-29 01:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2264 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11713 KB; 2026-03-29 01:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2814 KB; ModuleMetadata: 2264 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 332 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11883 KB; 2026-03-29 01:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 01:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:40:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 01:40:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 01:40:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 01:40:17 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 01:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2816 KB; ModuleMetadata: 2264 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 338 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11888 KB; 2026-03-29 01:40:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 01:35:01, To:, 2026-03-29 01:40:29, Duration (s):, 328, Events Per Second:, 0.603, Events:, 198, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 197, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26358 2026-03-29 01:40:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s665ms. 2026-03-29 01:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2818 KB; ModuleMetadata: 2264 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 338 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11792 KB; 2026-03-29 01:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2264 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 338 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11714 KB; 2026-03-29 01:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2264 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 406 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11908 KB; 2026-03-29 01:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2264 KB; ProcessInfo: 932 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 419 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11978 KB; 2026-03-29 01:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 01:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:45:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 01:45:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 01:45:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 01:45:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 01:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2264 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 423 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11986 KB; 2026-03-29 01:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2264 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 421 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11969 KB; 2026-03-29 01:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2264 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 421 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11937 KB; 2026-03-29 01:47:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 01:40:46, To:, 2026-03-29 01:47:29, Duration (s):, 403, Events Per Second:, 0.691, Events:, 279, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 242, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35179 2026-03-29 01:47:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s778ms. 2026-03-29 01:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2264 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 421 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11722 KB; 2026-03-29 01:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2264 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 419 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11717 KB; 2026-03-29 01:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 01:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:50:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 01:50:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 01:50:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 01:50:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 01:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2264 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11333 KB; 2026-03-29 01:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2264 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11346 KB; 2026-03-29 01:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2264 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11343 KB; 2026-03-29 01:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2264 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11357 KB; 2026-03-29 01:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2264 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11360 KB; 2026-03-29 01:54:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 01:48:54, To:, 2026-03-29 01:54:29, Duration (s):, 335, Events Per Second:, 0.107, Events:, 36, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 35, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6937 2026-03-29 01:54:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s876ms. 2026-03-29 01:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 01:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:55:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 01:55:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 01:55:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 01:55:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 01:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2264 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11345 KB; 2026-03-29 01:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2264 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11362 KB; 2026-03-29 01:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2264 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11348 KB; 2026-03-29 01:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2264 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11354 KB; 2026-03-29 01:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2264 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11347 KB; 2026-03-29 01:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 01:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 01:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:00:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 02:00:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 02:00:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 02:00:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 02:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2265 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 54 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11390 KB; 2026-03-29 02:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2265 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 54 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11393 KB; 2026-03-29 02:01:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 01:55:01, To:, 2026-03-29 02:01:29, Duration (s):, 388, Events Per Second:, 0.142, Events:, 55, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 54, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9704 2026-03-29 02:01:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s514ms. 2026-03-29 02:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2740 KB; ModuleMetadata: 2265 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 54 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11393 KB; 2026-03-29 02:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2265 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11429 KB; 2026-03-29 02:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2265 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 54 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11408 KB; 2026-03-29 02:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 02:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:05:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 02:05:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 02:05:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 02:05:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 02:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2265 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11419 KB; 2026-03-29 02:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2265 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11418 KB; 2026-03-29 02:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2265 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11401 KB; 2026-03-29 02:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2265 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11404 KB; 2026-03-29 02:08:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 02:03:08, To:, 2026-03-29 02:08:29, Duration (s):, 321, Events Per Second:, 0.118, Events:, 38, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 37, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6771 2026-03-29 02:08:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s144ms. 2026-03-29 02:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 2265 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11441 KB; 2026-03-29 02:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 02:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:10:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 02:10:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 02:10:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 02:10:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 02:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 2265 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11445 KB; 2026-03-29 02:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 2265 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11458 KB; 2026-03-29 02:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2265 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11435 KB; 2026-03-29 02:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2265 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11447 KB; 2026-03-29 02:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2265 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11466 KB; 2026-03-29 02:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 02:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:15:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 02:15:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 02:15:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 02:15:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 02:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 2267 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11475 KB; 2026-03-29 02:15:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 02:09:00, To:, 2026-03-29 02:15:29, Duration (s):, 389, Events Per Second:, 0.357, Events:, 139, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 138, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18796 2026-03-29 02:15:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s824ms. 2026-03-29 02:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2267 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11405 KB; 2026-03-29 02:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2267 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11399 KB; 2026-03-29 02:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2267 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11397 KB; 2026-03-29 02:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2267 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11419 KB; 2026-03-29 02:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 02:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:20:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 02:20:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 02:20:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 02:20:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 02:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 2267 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11435 KB; 2026-03-29 02:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2755 KB; ModuleMetadata: 2267 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11445 KB; 2026-03-29 02:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2267 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11436 KB; 2026-03-29 02:22:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 02:15:50, To:, 2026-03-29 02:22:29, Duration (s):, 399, Events Per Second:, 0.173, Events:, 69, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 68, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10852 2026-03-29 02:22:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s668ms. 2026-03-29 02:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2740 KB; ModuleMetadata: 2267 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 134 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11520 KB; 2026-03-29 02:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2267 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11434 KB; 2026-03-29 02:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 02:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:25:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 02:25:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 02:25:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 02:25:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 02:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 2267 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11462 KB; 2026-03-29 02:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2267 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11463 KB; 2026-03-29 02:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2267 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11434 KB; 2026-03-29 02:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2267 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11436 KB; 2026-03-29 02:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2267 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11442 KB; 2026-03-29 02:29:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 02:23:06, To:, 2026-03-29 02:29:29, Duration (s):, 383, Events Per Second:, 0.216, Events:, 83, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 82, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12758 2026-03-29 02:29:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s663ms. 2026-03-29 02:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 02:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:30:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 02:30:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 02:30:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 02:30:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 02:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2268 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11421 KB; 2026-03-29 02:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2740 KB; ModuleMetadata: 2268 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 93 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11429 KB; 2026-03-29 02:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2780 KB; ModuleMetadata: 2268 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11466 KB; 2026-03-29 02:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2783 KB; ModuleMetadata: 2268 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 95 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11486 KB; 2026-03-29 02:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2786 KB; ModuleMetadata: 2268 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11507 KB; 2026-03-29 02:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 02:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:35:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 02:35:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 02:35:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 02:35:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 02:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2787 KB; ModuleMetadata: 2268 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 99 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11514 KB; 2026-03-29 02:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2268 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11501 KB; 2026-03-29 02:36:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 02:30:15, To:, 2026-03-29 02:36:29, Duration (s):, 374, Events Per Second:, 0.211, Events:, 79, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 66, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 11519 2026-03-29 02:36:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s740ms. 2026-03-29 02:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2754 KB; ModuleMetadata: 2268 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 99 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11471 KB; 2026-03-29 02:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2756 KB; ModuleMetadata: 2268 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11475 KB; 2026-03-29 02:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2268 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 110 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11556 KB; 2026-03-29 02:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 02:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:40:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 02:40:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 02:40:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 02:40:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 02:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2268 KB; ProcessInfo: 967 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 226 KB; rules::ProcessConditionsCache: 222 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 155 KB; BaseEvent: 66 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11867 KB; 2026-03-29 02:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2268 KB; ProcessInfo: 991 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 240 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 155 KB; BaseEvent: 77 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11932 KB; 2026-03-29 02:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2268 KB; ProcessInfo: 1086 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 155 KB; BaseEvent: 126 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12243 KB; 2026-03-29 02:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2799 KB; ModuleMetadata: 2268 KB; ProcessInfo: 1136 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 395 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 155 KB; BaseEvent: 150 KB; ProcessInfoCommandLineTag: 57 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12412 KB; 2026-03-29 02:43:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 02:36:33, To:, 2026-03-29 02:43:29, Duration (s):, 416, Events Per Second:, 2.419, Events:, 1008, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 866, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 141, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 117013 2026-03-29 02:43:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s195ms. 2026-03-29 02:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2801 KB; ModuleMetadata: 2268 KB; ProcessInfo: 969 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 421 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12068 KB; 2026-03-29 02:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 02:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:45:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 02:45:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 02:45:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 02:45:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 02:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2784 KB; ModuleMetadata: 2270 KB; ProcessInfo: 978 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11647 KB; 2026-03-29 02:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2785 KB; ModuleMetadata: 2270 KB; ProcessInfo: 978 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11621 KB; 2026-03-29 02:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2771 KB; ModuleMetadata: 2270 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11598 KB; 2026-03-29 02:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2773 KB; ModuleMetadata: 2270 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11604 KB; 2026-03-29 02:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2774 KB; ModuleMetadata: 2270 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11601 KB; 2026-03-29 02:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 02:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:50:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 02:50:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 02:50:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 02:50:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 02:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2778 KB; ModuleMetadata: 2270 KB; ProcessInfo: 985 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11627 KB; 2026-03-29 02:50:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 02:45:00, To:, 2026-03-29 02:50:29, Duration (s):, 329, Events Per Second:, 0.140, Events:, 46, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 37, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7798 2026-03-29 02:50:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s664ms. 2026-03-29 02:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2780 KB; ModuleMetadata: 2270 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11430 KB; 2026-03-29 02:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2781 KB; ModuleMetadata: 2270 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 48 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11431 KB; 2026-03-29 02:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2821 KB; ModuleMetadata: 2270 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11479 KB; 2026-03-29 02:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2822 KB; ModuleMetadata: 2270 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 48 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11476 KB; 2026-03-29 02:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 02:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:55:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 02:55:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 02:55:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 02:55:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 02:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2784 KB; ModuleMetadata: 2270 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11443 KB; 2026-03-29 02:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2786 KB; ModuleMetadata: 2270 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11446 KB; 2026-03-29 02:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2773 KB; ModuleMetadata: 2270 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11438 KB; 2026-03-29 02:57:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 02:50:59, To:, 2026-03-29 02:57:29, Duration (s):, 390, Events Per Second:, 0.067, Events:, 26, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 25, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6340 2026-03-29 02:57:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s793ms. 2026-03-29 02:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2755 KB; ModuleMetadata: 2270 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11400 KB; 2026-03-29 02:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2756 KB; ModuleMetadata: 2270 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11404 KB; 2026-03-29 02:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 02:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 02:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:00:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 03:00:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 03:00:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 03:00:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 03:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2758 KB; ModuleMetadata: 2270 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 64 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11438 KB; 2026-03-29 03:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2761 KB; ModuleMetadata: 2270 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11597 KB; 2026-03-29 03:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2270 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11601 KB; 2026-03-29 03:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2270 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 113 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11620 KB; 2026-03-29 03:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2764 KB; ModuleMetadata: 2270 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11621 KB; 2026-03-29 03:04:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 02:57:40, To:, 2026-03-29 03:04:29, Duration (s):, 409, Events Per Second:, 0.603, Events:, 247, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 246, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31907 2026-03-29 03:04:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s735ms. 2026-03-29 03:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 03:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:05:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 03:05:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 03:05:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 03:05:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 03:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2766 KB; ModuleMetadata: 2270 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 113 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11494 KB; 2026-03-29 03:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2768 KB; ModuleMetadata: 2270 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11498 KB; 2026-03-29 03:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2755 KB; ModuleMetadata: 2270 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11490 KB; 2026-03-29 03:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2777 KB; ModuleMetadata: 2270 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11516 KB; 2026-03-29 03:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2758 KB; ModuleMetadata: 2270 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11567 KB; 2026-03-29 03:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 03:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:10:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 03:10:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 03:10:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 03:10:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 03:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2761 KB; ModuleMetadata: 2270 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11589 KB; 2026-03-29 03:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2270 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 131 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11597 KB; 2026-03-29 03:11:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 03:05:00, To:, 2026-03-29 03:11:29, Duration (s):, 389, Events Per Second:, 0.441, Events:, 172, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 171, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23342 2026-03-29 03:11:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s605ms. 2026-03-29 03:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2270 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 131 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11557 KB; 2026-03-29 03:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2270 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 131 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11557 KB; 2026-03-29 03:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2270 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 131 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11557 KB; 2026-03-29 03:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 03:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:15:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 03:15:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 03:15:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 03:15:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 03:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2270 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 131 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11557 KB; 2026-03-29 03:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2753 KB; ModuleMetadata: 2270 KB; ProcessInfo: 953 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 59 KB; BaseEvent: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11898 KB; 2026-03-29 03:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2270 KB; ProcessInfo: 966 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 245 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 60 KB; BaseEvent: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11905 KB; 2026-03-29 03:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2270 KB; ProcessInfo: 972 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 245 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 59 KB; BaseEvent: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11918 KB; 2026-03-29 03:18:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 03:10:47, To:, 2026-03-29 03:18:29, Duration (s):, 462, Events Per Second:, 0.824, Events:, 381, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 322, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 52, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47048 2026-03-29 03:18:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s826ms. 2026-03-29 03:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 2270 KB; ProcessInfo: 982 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11940 KB; 2026-03-29 03:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 03:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:20:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 03:20:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 03:20:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 03:20:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 03:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2746 KB; ModuleMetadata: 2270 KB; ProcessInfo: 988 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11952 KB; 2026-03-29 03:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2748 KB; ModuleMetadata: 2270 KB; ProcessInfo: 991 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11958 KB; 2026-03-29 03:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2270 KB; ProcessInfo: 1014 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11953 KB; 2026-03-29 03:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 2270 KB; ProcessInfo: 1014 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11958 KB; 2026-03-29 03:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 2270 KB; ProcessInfo: 1014 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11959 KB; 2026-03-29 03:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 03:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:25:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 03:25:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 03:25:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 03:25:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 03:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2270 KB; ProcessInfo: 1017 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11943 KB; 2026-03-29 03:25:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 03:18:29, To:, 2026-03-29 03:25:29, Duration (s):, 420, Events Per Second:, 0.663, Events:, 279, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 245, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 33, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35216 2026-03-29 03:25:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s824ms. 2026-03-29 03:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2270 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11660 KB; 2026-03-29 03:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2270 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 348 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11670 KB; 2026-03-29 03:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2270 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11679 KB; 2026-03-29 03:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2270 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 348 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11695 KB; 2026-03-29 03:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 03:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:30:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 03:30:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 03:30:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 03:30:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 03:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2271 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 357 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11742 KB; 2026-03-29 03:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2271 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 357 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11750 KB; 2026-03-29 03:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2747 KB; ModuleMetadata: 2271 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 357 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11753 KB; 2026-03-29 03:32:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 03:25:46, To:, 2026-03-29 03:32:29, Duration (s):, 403, Events Per Second:, 0.277, Events:, 112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 39, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 36, Livegrid:, 36, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13532 2026-03-29 03:32:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s646ms. 2026-03-29 03:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2271 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 362 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11710 KB; 2026-03-29 03:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2749 KB; ModuleMetadata: 2271 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 357 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11725 KB; 2026-03-29 03:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 03:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:35:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 03:35:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 03:35:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 03:35:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 03:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2750 KB; ModuleMetadata: 2271 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 359 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11736 KB; 2026-03-29 03:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2752 KB; ModuleMetadata: 2271 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 359 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11727 KB; 2026-03-29 03:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2739 KB; ModuleMetadata: 2271 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 359 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11716 KB; 2026-03-29 03:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2759 KB; ModuleMetadata: 2271 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 359 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11734 KB; 2026-03-29 03:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2761 KB; ModuleMetadata: 2271 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 364 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 156 KB; BaseEvent: 66 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11875 KB; 2026-03-29 03:39:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 03:32:57, To:, 2026-03-29 03:39:29, Duration (s):, 392, Events Per Second:, 0.871, Events:, 342, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 157, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 92, Livegrid:, 92, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36478 2026-03-29 03:39:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s990ms. 2026-03-29 03:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 03:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:40:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 03:40:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 03:40:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 03:40:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 03:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2764 KB; ModuleMetadata: 2271 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 372 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11780 KB; 2026-03-29 03:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2765 KB; ModuleMetadata: 2271 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 372 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11785 KB; 2026-03-29 03:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2271 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 372 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11789 KB; 2026-03-29 03:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2769 KB; ModuleMetadata: 2271 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 378 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11808 KB; 2026-03-29 03:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2770 KB; ModuleMetadata: 2271 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 374 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11801 KB; 2026-03-29 03:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 03:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:45:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 03:45:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 03:45:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 03:45:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 03:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2771 KB; ModuleMetadata: 2271 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 374 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11806 KB; 2026-03-29 03:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2772 KB; ModuleMetadata: 2271 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 374 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11808 KB; 2026-03-29 03:46:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 03:40:09, To:, 2026-03-29 03:46:29, Duration (s):, 380, Events Per Second:, 0.081, Events:, 31, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 26, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6197 2026-03-29 03:46:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s269ms. 2026-03-29 03:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2758 KB; ModuleMetadata: 2271 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 374 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11736 KB; 2026-03-29 03:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2759 KB; ModuleMetadata: 2271 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 380 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11756 KB; 2026-03-29 03:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2761 KB; ModuleMetadata: 2271 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 380 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11760 KB; 2026-03-29 03:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 03:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2764 KB; ModuleMetadata: 2271 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 387 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11781 KB; 2026-03-29 03:50:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 03:50:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 03:50:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 03:50:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 03:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2766 KB; ModuleMetadata: 2271 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 389 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11782 KB; 2026-03-29 03:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2768 KB; ModuleMetadata: 2271 KB; ProcessInfo: 964 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; rules::ProcessConditionsCache: 171 KB; cloudutils::CloudData: 156 KB; BaseEvent: 97 KB; ProcessInfoCommandLineTag: 49 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11926 KB; 2026-03-29 03:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2770 KB; ModuleMetadata: 2271 KB; ProcessInfo: 976 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 156 KB; BaseEvent: 97 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11999 KB; 2026-03-29 03:53:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 03:47:27, To:, 2026-03-29 03:53:29, Duration (s):, 362, Events Per Second:, 1.605, Events:, 582, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 448, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 25, Livegrid:, 25, OriginUrl:, 0, Alarms:, 83, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 68632 2026-03-29 03:53:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s734ms. 2026-03-29 03:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2751 KB; ModuleMetadata: 2271 KB; ProcessInfo: 970 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; rules::ProcessConditionsCache: 175 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11804 KB; 2026-03-29 03:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 03:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2753 KB; ModuleMetadata: 2271 KB; ProcessInfo: 972 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 193 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11744 KB; 2026-03-29 03:55:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 03:55:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 03:55:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 03:55:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 03:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2754 KB; ModuleMetadata: 2271 KB; ProcessInfo: 976 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 193 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11773 KB; 2026-03-29 03:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2271 KB; ProcessInfo: 976 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 181 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11740 KB; 2026-03-29 03:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2762 KB; ModuleMetadata: 2271 KB; ProcessInfo: 1023 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 240 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11933 KB; 2026-03-29 03:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2271 KB; ProcessInfo: 1035 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11867 KB; 2026-03-29 03:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 03:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 03:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2271 KB; ProcessInfo: 1053 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11932 KB; 2026-03-29 04:00:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 04:00:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 04:00:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 04:00:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 04:00:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 03:53:29, To:, 2026-03-29 04:00:29, Duration (s):, 420, Events Per Second:, 0.713, Events:, 300, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 247, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38975 2026-03-29 04:00:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s865ms. 2026-03-29 04:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2766 KB; ModuleMetadata: 2271 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 210 KB; rules::ProcessConditionsCache: 200 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11664 KB; 2026-03-29 04:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2271 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11631 KB; 2026-03-29 04:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2768 KB; ModuleMetadata: 2271 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11635 KB; 2026-03-29 04:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2271 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 209 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11668 KB; 2026-03-29 04:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 04:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2271 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 209 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11668 KB; 2026-03-29 04:05:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 04:05:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 04:05:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 04:05:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 04:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2271 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 209 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11668 KB; 2026-03-29 04:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2271 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 209 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11668 KB; 2026-03-29 04:07:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 04:00:29, To:, 2026-03-29 04:03:51, Duration (s):, 202, Events Per Second:, 0.376, Events:, 76, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 5, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 35, Livegrid:, 35, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8542 2026-03-29 04:07:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s512ms. 2026-03-29 04:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2271 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 210 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11564 KB; 2026-03-29 04:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2760 KB; ModuleMetadata: 2271 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11614 KB; 2026-03-29 04:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 04:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2762 KB; ModuleMetadata: 2271 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11692 KB; 2026-03-29 04:10:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 04:10:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 04:10:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 04:10:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 04:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2271 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11699 KB; 2026-03-29 04:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2765 KB; ModuleMetadata: 2271 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11700 KB; 2026-03-29 04:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2271 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 240 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11712 KB; 2026-03-29 04:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2271 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11708 KB; 2026-03-29 04:14:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 04:03:47, To:, 2026-03-29 04:14:29, Duration (s):, 642, Events Per Second:, 0.289, Events:, 186, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 183, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25062 2026-03-29 04:14:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s014ms. 2026-03-29 04:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 04:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2768 KB; ModuleMetadata: 2273 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11634 KB; 2026-03-29 04:15:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 04:15:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 04:15:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 04:15:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 04:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2770 KB; ModuleMetadata: 2273 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 155 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11636 KB; 2026-03-29 04:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2791 KB; ModuleMetadata: 2273 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11665 KB; 2026-03-29 04:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2792 KB; ModuleMetadata: 2273 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11694 KB; 2026-03-29 04:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2758 KB; ModuleMetadata: 2273 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11664 KB; 2026-03-29 04:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 04:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2273 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11641 KB; 2026-03-29 04:20:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 04:20:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 04:20:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 04:20:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 04:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2273 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 309 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11775 KB; 2026-03-29 04:21:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 04:14:26, To:, 2026-03-29 04:21:29, Duration (s):, 423, Events Per Second:, 0.401, Events:, 170, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 167, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23627 2026-03-29 04:21:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s680ms. 2026-03-29 04:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2273 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 246 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11654 KB; 2026-03-29 04:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2273 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11638 KB; 2026-03-29 04:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2273 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11659 KB; 2026-03-29 04:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 04:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2273 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11633 KB; 2026-03-29 04:25:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 04:25:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 04:25:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 04:25:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 04:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2273 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11638 KB; 2026-03-29 04:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2273 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11640 KB; 2026-03-29 04:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2273 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11638 KB; 2026-03-29 04:28:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 04:21:29, To:, 2026-03-29 04:28:29, Duration (s):, 420, Events Per Second:, 0.102, Events:, 43, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 42, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9295 2026-03-29 04:28:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s231ms. 2026-03-29 04:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2273 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11562 KB; 2026-03-29 04:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 04:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2273 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11574 KB; 2026-03-29 04:30:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 04:30:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 04:30:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 04:30:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 04:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2273 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11578 KB; 2026-03-29 04:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2273 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11576 KB; 2026-03-29 04:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2273 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11580 KB; 2026-03-29 04:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2273 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11586 KB; 2026-03-29 04:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 04:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2273 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11589 KB; 2026-03-29 04:35:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 04:35:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 04:35:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 04:35:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 04:35:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 04:29:16, To:, 2026-03-29 04:35:29, Duration (s):, 373, Events Per Second:, 0.078, Events:, 29, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 28, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 5699 2026-03-29 04:35:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s553ms. 2026-03-29 04:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2273 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11587 KB; 2026-03-29 04:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2273 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11582 KB; 2026-03-29 04:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2273 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11666 KB; 2026-03-29 04:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2273 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11745 KB; 2026-03-29 04:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 04:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2748 KB; ModuleMetadata: 2273 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 296 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11781 KB; 2026-03-29 04:40:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 04:40:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 04:40:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 04:40:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 04:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2749 KB; ModuleMetadata: 2273 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11858 KB; 2026-03-29 04:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2751 KB; ModuleMetadata: 2273 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11856 KB; 2026-03-29 04:42:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 04:35:50, To:, 2026-03-29 04:42:29, Duration (s):, 399, Events Per Second:, 0.743, Events:, 297, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 272, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37765 2026-03-29 04:42:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s934ms. 2026-03-29 04:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2751 KB; ModuleMetadata: 2273 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11790 KB; 2026-03-29 04:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2752 KB; ModuleMetadata: 2273 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11782 KB; 2026-03-29 04:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 04:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2279 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11779 KB; 2026-03-29 04:45:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 04:45:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 04:45:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 04:45:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 04:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2279 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 358 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11800 KB; 2026-03-29 04:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2279 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11801 KB; 2026-03-29 04:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2279 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 371 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11828 KB; 2026-03-29 04:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2279 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11811 KB; 2026-03-29 04:49:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 04:42:56, To:, 2026-03-29 04:49:29, Duration (s):, 393, Events Per Second:, 0.437, Events:, 172, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 160, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22843 2026-03-29 04:49:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s664ms. 2026-03-29 04:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 04:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2279 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 362 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11716 KB; 2026-03-29 04:50:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 04:50:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 04:50:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 04:50:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 04:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 2279 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 360 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11714 KB; 2026-03-29 04:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2746 KB; ModuleMetadata: 2279 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 360 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11723 KB; 2026-03-29 04:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2748 KB; ModuleMetadata: 2279 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 362 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11733 KB; 2026-03-29 04:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2749 KB; ModuleMetadata: 2279 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 364 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11739 KB; 2026-03-29 04:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 04:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2752 KB; ModuleMetadata: 2279 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 362 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11744 KB; 2026-03-29 04:55:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 04:55:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 04:55:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 04:55:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 04:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2752 KB; ModuleMetadata: 2279 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 362 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11747 KB; 2026-03-29 04:56:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 04:50:01, To:, 2026-03-29 04:56:29, Duration (s):, 388, Events Per Second:, 0.077, Events:, 30, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 29, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6108 2026-03-29 04:56:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s667ms. 2026-03-29 04:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2754 KB; ModuleMetadata: 2279 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 362 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11727 KB; 2026-03-29 04:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2755 KB; ModuleMetadata: 2279 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 362 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11730 KB; 2026-03-29 04:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2761 KB; ModuleMetadata: 2279 KB; ProcessInfo: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 362 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11737 KB; 2026-03-29 04:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 04:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 04:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2759 KB; ModuleMetadata: 2279 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 378 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11773 KB; 2026-03-29 05:00:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 05:00:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 05:00:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 05:00:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 05:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2760 KB; ModuleMetadata: 2279 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 375 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11772 KB; 2026-03-29 05:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2762 KB; ModuleMetadata: 2279 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 378 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11783 KB; 2026-03-29 05:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2279 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 378 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11763 KB; 2026-03-29 05:03:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 04:59:46, To:, 2026-03-29 05:03:29, Duration (s):, 223, Events Per Second:, 0.179, Events:, 40, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 39, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7740 2026-03-29 05:03:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s936ms. 2026-03-29 05:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2279 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 376 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11732 KB; 2026-03-29 05:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 05:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2279 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 94 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11517 KB; 2026-03-29 05:05:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 05:05:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 05:05:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 05:05:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 05:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2279 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11495 KB; 2026-03-29 05:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2279 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11601 KB; 2026-03-29 05:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2279 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11536 KB; 2026-03-29 05:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2279 KB; ProcessInfo: 916 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 52 KB; rules::ProcessConditionsCache: 41 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11552 KB; 2026-03-29 05:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 05:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2279 KB; ProcessInfo: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 43 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11572 KB; 2026-03-29 05:10:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 05:10:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 05:10:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 05:10:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 05:10:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 05:03:33, To:, 2026-03-29 05:10:29, Duration (s):, 416, Events Per Second:, 0.943, Events:, 393, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 392, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48025 2026-03-29 05:10:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s770ms. 2026-03-29 05:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2279 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11437 KB; 2026-03-29 05:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2279 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11445 KB; 2026-03-29 05:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2279 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11435 KB; 2026-03-29 05:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2279 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11436 KB; 2026-03-29 05:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 05:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2279 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11448 KB; 2026-03-29 05:15:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 05:15:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 05:15:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 05:15:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 05:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2279 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11449 KB; 2026-03-29 05:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2279 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11472 KB; 2026-03-29 05:17:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 05:10:29, To:, 2026-03-29 05:17:29, Duration (s):, 420, Events Per Second:, 0.109, Events:, 46, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 45, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8365 2026-03-29 05:17:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s633ms. 2026-03-29 05:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2279 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11385 KB; 2026-03-29 05:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2279 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11372 KB; 2026-03-29 05:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 05:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2279 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11483 KB; 2026-03-29 05:20:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 05:20:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 05:20:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 05:20:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 05:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2279 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11431 KB; 2026-03-29 05:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2279 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11431 KB; 2026-03-29 05:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2279 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11430 KB; 2026-03-29 05:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2279 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11413 KB; 2026-03-29 05:24:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 05:17:40, To:, 2026-03-29 05:24:29, Duration (s):, 409, Events Per Second:, 0.183, Events:, 75, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 74, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 11329 2026-03-29 05:24:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s041ms. 2026-03-29 05:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 05:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2279 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11381 KB; 2026-03-29 05:25:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 05:25:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 05:25:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 05:25:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 05:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2279 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11389 KB; 2026-03-29 05:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2279 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11387 KB; 2026-03-29 05:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2279 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11391 KB; 2026-03-29 05:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2755 KB; ModuleMetadata: 2279 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11440 KB; 2026-03-29 05:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 05:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2756 KB; ModuleMetadata: 2279 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11471 KB; 2026-03-29 05:30:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 05:30:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 05:30:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 05:30:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 05:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 2279 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11450 KB; 2026-03-29 05:31:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 05:24:33, To:, 2026-03-29 05:31:29, Duration (s):, 416, Events Per Second:, 0.137, Events:, 57, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 56, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9653 2026-03-29 05:31:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s654ms. 2026-03-29 05:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2739 KB; ModuleMetadata: 2279 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11445 KB; 2026-03-29 05:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2740 KB; ModuleMetadata: 2279 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11438 KB; 2026-03-29 05:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2279 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11439 KB; 2026-03-29 05:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 05:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2279 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11449 KB; 2026-03-29 05:35:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 05:35:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 05:35:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 05:35:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 05:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2279 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 84 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11467 KB; 2026-03-29 05:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2279 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11445 KB; 2026-03-29 05:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2279 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11451 KB; 2026-03-29 05:38:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 05:35:00, To:, 2026-03-29 05:38:29, Duration (s):, 209, Events Per Second:, 0.124, Events:, 26, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 25, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 5489 2026-03-29 05:38:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s409ms. 2026-03-29 05:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 2279 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 86 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11505 KB; 2026-03-29 05:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 05:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2279 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11524 KB; 2026-03-29 05:40:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 05:40:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 05:40:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 05:40:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 05:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2739 KB; ModuleMetadata: 2279 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11523 KB; 2026-03-29 05:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 2279 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 94 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11535 KB; 2026-03-29 05:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2279 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 94 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11542 KB; 2026-03-29 05:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2279 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 99 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11556 KB; 2026-03-29 05:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 05:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2279 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 99 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11565 KB; 2026-03-29 05:45:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 05:45:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 05:45:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 05:45:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 05:45:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 05:38:46, To:, 2026-03-29 05:45:29, Duration (s):, 403, Events Per Second:, 0.411, Events:, 166, File:, 3, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 157, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 5, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22198 2026-03-29 05:45:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s637ms. 2026-03-29 05:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2766 KB; ModuleMetadata: 2279 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11502 KB; 2026-03-29 05:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2766 KB; ModuleMetadata: 2279 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11510 KB; 2026-03-29 05:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2748 KB; ModuleMetadata: 2279 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11489 KB; 2026-03-29 05:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2754 KB; ModuleMetadata: 2279 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11494 KB; 2026-03-29 05:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 05:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2757 KB; ModuleMetadata: 2279 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 106 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11506 KB; 2026-03-29 05:50:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 05:50:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 05:50:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 05:50:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 05:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2279 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 104 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11482 KB; 2026-03-29 05:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2279 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 104 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11487 KB; 2026-03-29 05:52:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 05:45:39, To:, 2026-03-29 05:52:29, Duration (s):, 410, Events Per Second:, 0.163, Events:, 67, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 66, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10253 2026-03-29 05:52:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s492ms. 2026-03-29 05:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2279 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 158 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11617 KB; 2026-03-29 05:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2279 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 202 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11711 KB; 2026-03-29 05:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 05:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2279 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 203 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11717 KB; 2026-03-29 05:55:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 05:55:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 05:55:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 05:55:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 05:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2279 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; rules::ProcessConditionsCache: 226 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11771 KB; 2026-03-29 05:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2279 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 193 KB; rules::ProcessConditionsCache: 191 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11727 KB; 2026-03-29 05:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2748 KB; ModuleMetadata: 2279 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 192 KB; rules::ProcessConditionsCache: 191 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11731 KB; 2026-03-29 05:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2279 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 189 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11708 KB; 2026-03-29 05:59:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 05:52:46, To:, 2026-03-29 05:59:29, Duration (s):, 403, Events Per Second:, 0.696, Events:, 281, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 243, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 33, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35207 2026-03-29 05:59:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s626ms. 2026-03-29 05:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 05:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 05:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2281 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; rules::ProcessConditionsCache: 203 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11583 KB; 2026-03-29 06:00:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 06:00:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 06:00:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 06:00:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 06:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 2281 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11821 KB; 2026-03-29 06:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2744 KB; ModuleMetadata: 2281 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11824 KB; 2026-03-29 06:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2281 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11817 KB; 2026-03-29 06:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2746 KB; ModuleMetadata: 2281 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11823 KB; 2026-03-29 06:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 06:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2747 KB; ModuleMetadata: 2281 KB; ProcessInfo: 940 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11829 KB; 2026-03-29 06:05:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 06:05:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 06:05:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 06:05:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 06:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2748 KB; ModuleMetadata: 2281 KB; ProcessInfo: 941 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11837 KB; 2026-03-29 06:06:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 05:59:40, To:, 2026-03-29 06:06:29, Duration (s):, 409, Events Per Second:, 0.949, Events:, 389, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 386, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47586 2026-03-29 06:06:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s818ms. 2026-03-29 06:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2751 KB; ModuleMetadata: 2281 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11625 KB; 2026-03-29 06:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2752 KB; ModuleMetadata: 2281 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11627 KB; 2026-03-29 06:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2739 KB; ModuleMetadata: 2281 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11689 KB; 2026-03-29 06:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 06:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2281 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11684 KB; 2026-03-29 06:10:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 06:10:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 06:10:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 06:10:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 06:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2281 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11686 KB; 2026-03-29 06:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2281 KB; ProcessInfo: 963 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 370 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 61 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11981 KB; 2026-03-29 06:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2747 KB; ModuleMetadata: 2281 KB; ProcessInfo: 963 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 342 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 61 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11974 KB; 2026-03-29 06:13:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 06:06:29, To:, 2026-03-29 06:13:29, Duration (s):, 420, Events Per Second:, 1.127, Events:, 474, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 449, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 12, Livegrid:, 12, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57712 2026-03-29 06:13:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s778ms. 2026-03-29 06:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2748 KB; ModuleMetadata: 2281 KB; ProcessInfo: 909 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11852 KB; 2026-03-29 06:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 06:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2751 KB; ModuleMetadata: 2281 KB; ProcessInfo: 917 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 344 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11859 KB; 2026-03-29 06:15:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 06:15:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 06:15:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 06:15:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 06:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2752 KB; ModuleMetadata: 2281 KB; ProcessInfo: 917 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 344 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11852 KB; 2026-03-29 06:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2753 KB; ModuleMetadata: 2281 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 346 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11906 KB; 2026-03-29 06:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2755 KB; ModuleMetadata: 2281 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 346 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11907 KB; 2026-03-29 06:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2281 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 346 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11898 KB; 2026-03-29 06:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 06:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2764 KB; ModuleMetadata: 2281 KB; ProcessInfo: 948 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11907 KB; 2026-03-29 06:20:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 06:20:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 06:20:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 06:20:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 06:20:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 06:13:48, To:, 2026-03-29 06:20:29, Duration (s):, 401, Events Per Second:, 0.259, Events:, 104, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 103, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14928 2026-03-29 06:20:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s672ms. 2026-03-29 06:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2783 KB; ModuleMetadata: 2281 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 358 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11759 KB; 2026-03-29 06:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2765 KB; ModuleMetadata: 2281 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11737 KB; 2026-03-29 06:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 2281 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 398 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11799 KB; 2026-03-29 06:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2281 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 358 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11730 KB; 2026-03-29 06:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 06:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2281 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 363 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11744 KB; 2026-03-29 06:25:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 06:25:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 06:25:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 06:25:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 06:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2281 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 363 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11742 KB; 2026-03-29 06:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2281 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 361 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11728 KB; 2026-03-29 06:27:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 06:21:03, To:, 2026-03-29 06:27:29, Duration (s):, 386, Events Per Second:, 0.233, Events:, 90, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 83, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13782 2026-03-29 06:27:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s800ms. 2026-03-29 06:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2281 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 361 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11689 KB; 2026-03-29 06:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2281 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11466 KB; 2026-03-29 06:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 06:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2281 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11467 KB; 2026-03-29 06:30:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 06:30:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 06:30:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 06:30:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 06:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2281 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11542 KB; 2026-03-29 06:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2281 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11506 KB; 2026-03-29 06:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 2281 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11501 KB; 2026-03-29 06:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 2281 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11484 KB; 2026-03-29 06:34:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 06:28:23, To:, 2026-03-29 06:34:29, Duration (s):, 366, Events Per Second:, 0.545, Events:, 200, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 199, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25419 2026-03-29 06:34:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s538ms. 2026-03-29 06:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 06:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2281 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 45 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11378 KB; 2026-03-29 06:35:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 06:35:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 06:35:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 06:35:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 06:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2281 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 45 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11381 KB; 2026-03-29 06:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2281 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 45 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11382 KB; 2026-03-29 06:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2281 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 45 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11388 KB; 2026-03-29 06:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2281 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11447 KB; 2026-03-29 06:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 06:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2800 KB; ModuleMetadata: 2281 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11551 KB; 2026-03-29 06:40:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 06:40:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 06:40:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 06:40:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 06:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2861 KB; ModuleMetadata: 2281 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11617 KB; 2026-03-29 06:41:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 06:35:01, To:, 2026-03-29 06:41:29, Duration (s):, 388, Events Per Second:, 0.391, Events:, 152, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 149, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20680 2026-03-29 06:41:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s672ms. 2026-03-29 06:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2863 KB; ModuleMetadata: 2281 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11600 KB; 2026-03-29 06:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2864 KB; ModuleMetadata: 2281 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11605 KB; 2026-03-29 06:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2826 KB; ModuleMetadata: 2281 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11565 KB; 2026-03-29 06:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 06:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 2284 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11489 KB; 2026-03-29 06:45:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 06:45:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 06:45:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 06:45:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 06:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 2284 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11492 KB; 2026-03-29 06:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2284 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11501 KB; 2026-03-29 06:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2284 KB; ProcessInfo: 998 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 230 KB; rules::ProcessConditionsCache: 219 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 157 KB; BaseEvent: 76 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11946 KB; 2026-03-29 06:48:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 06:41:53, To:, 2026-03-29 06:48:29, Duration (s):, 396, Events Per Second:, 1.132, Events:, 449, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 371, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 67, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53339 2026-03-29 06:48:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s821ms. 2026-03-29 06:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2284 KB; ProcessInfo: 929 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 219 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11758 KB; 2026-03-29 06:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 06:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2284 KB; ProcessInfo: 929 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; rules::ProcessConditionsCache: 219 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11781 KB; 2026-03-29 06:50:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 06:50:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 06:50:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 06:50:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 06:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2284 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11753 KB; 2026-03-29 06:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2764 KB; ModuleMetadata: 2284 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11756 KB; 2026-03-29 06:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2284 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; rules::ProcessConditionsCache: 225 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11760 KB; 2026-03-29 06:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2767 KB; ModuleMetadata: 2284 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; rules::ProcessConditionsCache: 225 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11764 KB; 2026-03-29 06:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 06:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2769 KB; ModuleMetadata: 2284 KB; ProcessInfo: 941 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; rules::ProcessConditionsCache: 228 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11782 KB; 2026-03-29 06:55:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 06:50:22, To:, 2026-03-29 06:55:29, Duration (s):, 307, Events Per Second:, 0.107, Events:, 33, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 32, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 5776 2026-03-29 06:55:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 06:55:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 06:55:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 06:55:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 06:55:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s660ms. 2026-03-29 06:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2284 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11593 KB; 2026-03-29 06:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2284 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11587 KB; 2026-03-29 06:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2752 KB; ModuleMetadata: 2284 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11607 KB; 2026-03-29 06:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2760 KB; ModuleMetadata: 2284 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11623 KB; 2026-03-29 06:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 06:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 06:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2762 KB; ModuleMetadata: 2284 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11656 KB; 2026-03-29 07:00:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 07:00:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 07:00:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 07:00:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 07:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2786 KB; ModuleMetadata: 2284 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11721 KB; 2026-03-29 07:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2809 KB; ModuleMetadata: 2284 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11758 KB; 2026-03-29 07:02:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 06:55:43, To:, 2026-03-29 07:02:29, Duration (s):, 406, Events Per Second:, 0.130, Events:, 53, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 52, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10068 2026-03-29 07:02:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s858ms. 2026-03-29 07:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 2284 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11635 KB; 2026-03-29 07:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 2284 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11659 KB; 2026-03-29 07:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 07:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2284 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 273 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11714 KB; 2026-03-29 07:05:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 07:05:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 07:05:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 07:05:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 07:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2284 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11719 KB; 2026-03-29 07:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2284 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 288 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11794 KB; 2026-03-29 07:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2284 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11734 KB; 2026-03-29 07:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2284 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11779 KB; 2026-03-29 07:09:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 07:02:29, To:, 2026-03-29 07:09:29, Duration (s):, 420, Events Per Second:, 0.753, Events:, 317, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 316, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40289 2026-03-29 07:09:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s731ms. 2026-03-29 07:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 07:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2284 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11668 KB; 2026-03-29 07:10:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 07:10:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 07:10:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 07:10:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 07:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2284 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11660 KB; 2026-03-29 07:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2284 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11661 KB; 2026-03-29 07:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2284 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11685 KB; 2026-03-29 07:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2284 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11686 KB; 2026-03-29 07:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 07:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2284 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11695 KB; 2026-03-29 07:15:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 07:15:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 07:15:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 07:15:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 07:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2284 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11695 KB; 2026-03-29 07:16:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 07:10:08, To:, 2026-03-29 07:16:29, Duration (s):, 381, Events Per Second:, 0.110, Events:, 42, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 41, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7513 2026-03-29 07:16:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s084ms. 2026-03-29 07:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2284 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11606 KB; 2026-03-29 07:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2284 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11611 KB; 2026-03-29 07:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2698 KB; ModuleMetadata: 2284 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11601 KB; 2026-03-29 07:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 07:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2284 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11606 KB; 2026-03-29 07:20:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 07:20:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 07:20:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 07:20:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 07:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2284 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11610 KB; 2026-03-29 07:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2284 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11655 KB; 2026-03-29 07:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2284 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11656 KB; 2026-03-29 07:23:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 07:16:27, To:, 2026-03-29 07:23:29, Duration (s):, 422, Events Per Second:, 0.260, Events:, 110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 109, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15694 2026-03-29 07:23:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s740ms. 2026-03-29 07:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2284 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11565 KB; 2026-03-29 07:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 07:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2284 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11539 KB; 2026-03-29 07:25:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 07:25:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 07:25:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 07:25:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 07:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2284 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11572 KB; 2026-03-29 07:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2284 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11548 KB; 2026-03-29 07:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2284 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11511 KB; 2026-03-29 07:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2284 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11498 KB; 2026-03-29 07:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 07:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2285 KB; ProcessInfo: 887 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11550 KB; 2026-03-29 07:30:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 07:23:37, To:, 2026-03-29 07:30:29, Duration (s):, 412, Events Per Second:, 0.746, Events:, 308, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 235, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 36, Livegrid:, 36, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37064 2026-03-29 07:30:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s512ms. 2026-03-29 07:30:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 07:30:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 07:30:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 07:30:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 07:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2285 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 99 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11534 KB; 2026-03-29 07:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2285 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11506 KB; 2026-03-29 07:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2285 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11512 KB; 2026-03-29 07:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2285 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11487 KB; 2026-03-29 07:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 07:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2285 KB; ProcessInfo: 846 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 82 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11480 KB; 2026-03-29 07:35:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 07:35:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 07:35:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 07:35:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 07:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2285 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 84 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11491 KB; 2026-03-29 07:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2285 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 148 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11629 KB; 2026-03-29 07:37:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 07:30:29, To:, 2026-03-29 07:37:29, Duration (s):, 420, Events Per Second:, 0.447, Events:, 188, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 183, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26612 2026-03-29 07:37:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s463ms. 2026-03-29 07:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2285 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 86 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11468 KB; 2026-03-29 07:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2285 KB; ProcessInfo: 869 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 87 KB; BaseEvent: 66 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11612 KB; 2026-03-29 07:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 07:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2285 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 96 KB; BaseEvent: 68 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11631 KB; 2026-03-29 07:40:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 07:40:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 07:40:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 07:40:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 07:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2784 KB; ModuleMetadata: 2285 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 94 KB; BaseEvent: 71 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11690 KB; 2026-03-29 07:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2785 KB; ModuleMetadata: 2285 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 93 KB; BaseEvent: 75 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11711 KB; 2026-03-29 07:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2786 KB; ModuleMetadata: 2285 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 93 KB; BaseEvent: 76 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11715 KB; 2026-03-29 07:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2768 KB; ModuleMetadata: 2285 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 95 KB; BaseEvent: 76 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11705 KB; 2026-03-29 07:44:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 07:37:29, To:, 2026-03-29 07:44:29, Duration (s):, 420, Events Per Second:, 1.022, Events:, 430, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 241, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 94, Livegrid:, 94, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49820 2026-03-29 07:44:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s413ms. 2026-03-29 07:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 07:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2769 KB; ModuleMetadata: 2285 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11494 KB; 2026-03-29 07:45:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 07:45:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 07:45:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 07:45:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 07:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2771 KB; ModuleMetadata: 2285 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11499 KB; 2026-03-29 07:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2772 KB; ModuleMetadata: 2285 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11497 KB; 2026-03-29 07:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2774 KB; ModuleMetadata: 2285 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 145 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11599 KB; 2026-03-29 07:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2287 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 156 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11684 KB; 2026-03-29 07:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 07:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2287 KB; ProcessInfo: 1029 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 338 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 157 KB; BaseEvent: 107 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12197 KB; 2026-03-29 07:50:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 07:50:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 07:50:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 07:50:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 07:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2287 KB; ProcessInfo: 1063 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 342 KB; TcpIpConnectionsManager: 331 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 157 KB; BaseEvent: 112 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12253 KB; 2026-03-29 07:51:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 07:45:00, To:, 2026-03-29 07:51:29, Duration (s):, 389, Events Per Second:, 1.911, Events:, 745, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 612, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 80, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 86979 2026-03-29 07:51:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s442ms. 2026-03-29 07:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2287 KB; ProcessInfo: 1039 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 290 KB; rules::ProcessConditionsCache: 286 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12018 KB; 2026-03-29 07:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2747 KB; ModuleMetadata: 2287 KB; ProcessInfo: 1039 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 284 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11956 KB; 2026-03-29 07:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2749 KB; ModuleMetadata: 2287 KB; ProcessInfo: 1039 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11931 KB; 2026-03-29 07:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 07:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2750 KB; ModuleMetadata: 2287 KB; ProcessInfo: 1058 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11956 KB; 2026-03-29 07:55:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 07:55:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 07:55:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 07:55:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 07:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2751 KB; ModuleMetadata: 2287 KB; ProcessInfo: 1060 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11959 KB; 2026-03-29 07:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2287 KB; ProcessInfo: 1064 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11934 KB; 2026-03-29 07:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2287 KB; ProcessInfo: 1064 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11923 KB; 2026-03-29 07:58:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 07:51:29, To:, 2026-03-29 07:58:29, Duration (s):, 420, Events Per Second:, 0.223, Events:, 94, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 93, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15906 2026-03-29 07:58:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s631ms. 2026-03-29 07:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2287 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11646 KB; 2026-03-29 07:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 07:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 07:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2287 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11680 KB; 2026-03-29 08:00:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 08:00:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 08:00:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 08:00:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 08:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2287 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11724 KB; 2026-03-29 08:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2287 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11733 KB; 2026-03-29 08:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2287 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 307 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11791 KB; 2026-03-29 08:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2747 KB; ModuleMetadata: 2287 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 307 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11825 KB; 2026-03-29 08:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 08:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2287 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 307 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11811 KB; 2026-03-29 08:05:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 07:59:00, To:, 2026-03-29 08:05:29, Duration (s):, 389, Events Per Second:, 0.621, Events:, 242, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 235, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30915 2026-03-29 08:05:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s764ms. 2026-03-29 08:05:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 08:05:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 08:05:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 08:05:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 08:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 2287 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11699 KB; 2026-03-29 08:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2287 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11713 KB; 2026-03-29 08:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2287 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11745 KB; 2026-03-29 08:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2287 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11743 KB; 2026-03-29 08:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 08:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2287 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11745 KB; 2026-03-29 08:10:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 08:10:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 08:10:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 08:10:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 08:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2287 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11743 KB; 2026-03-29 08:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2287 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11743 KB; 2026-03-29 08:12:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 08:06:29, To:, 2026-03-29 08:08:22, Duration (s):, 113, Events Per Second:, 1.142, Events:, 129, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 12, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 58, Livegrid:, 58, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13162 2026-03-29 08:12:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s809ms. 2026-03-29 08:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2287 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11667 KB; 2026-03-29 08:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2287 KB; ProcessInfo: 869 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 337 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11810 KB; 2026-03-29 08:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 08:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2287 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11820 KB; 2026-03-29 08:15:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 08:15:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 08:15:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 08:15:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 08:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 2287 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 346 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11839 KB; 2026-03-29 08:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2768 KB; ModuleMetadata: 2287 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 366 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11907 KB; 2026-03-29 08:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 2287 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 346 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11856 KB; 2026-03-29 08:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2287 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 344 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11884 KB; 2026-03-29 08:19:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 08:08:17, To:, 2026-03-29 08:19:29, Duration (s):, 672, Events Per Second:, 0.501, Events:, 337, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 336, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43004 2026-03-29 08:19:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s010ms. 2026-03-29 08:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 08:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2287 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 348 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11761 KB; 2026-03-29 08:20:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 08:20:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 08:20:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 08:20:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 08:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2287 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 348 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11747 KB; 2026-03-29 08:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2287 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 348 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11727 KB; 2026-03-29 08:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2287 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 348 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11731 KB; 2026-03-29 08:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2287 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 348 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11721 KB; 2026-03-29 08:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 08:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2287 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11563 KB; 2026-03-29 08:25:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 08:25:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 08:25:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 08:25:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 08:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2287 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11511 KB; 2026-03-29 08:26:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 08:20:12, To:, 2026-03-29 08:26:29, Duration (s):, 377, Events Per Second:, 0.392, Events:, 148, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 147, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20215 2026-03-29 08:26:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s675ms. 2026-03-29 08:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2287 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11513 KB; 2026-03-29 08:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2287 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11501 KB; 2026-03-29 08:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2287 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11478 KB; 2026-03-29 08:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 08:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2791 KB; ModuleMetadata: 2287 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 213 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11633 KB; 2026-03-29 08:30:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 08:30:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 08:30:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 08:30:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 08:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2814 KB; ModuleMetadata: 2287 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11648 KB; 2026-03-29 08:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2818 KB; ModuleMetadata: 2287 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11845 KB; 2026-03-29 08:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2287 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11666 KB; 2026-03-29 08:33:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 08:26:53, To:, 2026-03-29 08:33:29, Duration (s):, 396, Events Per Second:, 0.786, Events:, 312, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 311, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38528 2026-03-29 08:33:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s167ms. 2026-03-29 08:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2287 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 104 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11589 KB; 2026-03-29 08:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 08:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2287 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11582 KB; 2026-03-29 08:35:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 08:35:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 08:35:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 08:35:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 08:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2287 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11549 KB; 2026-03-29 08:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 2287 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11568 KB; 2026-03-29 08:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 2287 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11531 KB; 2026-03-29 08:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2287 KB; ProcessInfo: 935 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; ProcessInfoCommandLineTag: 54 KB; rules::ProcessConditionsCache: 54 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11598 KB; 2026-03-29 08:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 08:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2287 KB; ProcessInfo: 941 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11616 KB; 2026-03-29 08:40:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 08:33:33, To:, 2026-03-29 08:40:29, Duration (s):, 416, Events Per Second:, 0.664, Events:, 277, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 276, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35321 2026-03-29 08:40:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s991ms. 2026-03-29 08:40:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 08:40:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 08:40:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 08:40:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 08:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 2287 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11485 KB; 2026-03-29 08:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2287 KB; ProcessInfo: 984 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 157 KB; BaseEvent: 70 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11914 KB; 2026-03-29 08:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2287 KB; ProcessInfo: 1009 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 262 KB; rules::ProcessConditionsCache: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 157 KB; BaseEvent: 73 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11977 KB; 2026-03-29 08:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2287 KB; ProcessInfo: 1009 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 261 KB; rules::ProcessConditionsCache: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 157 KB; BaseEvent: 75 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11958 KB; 2026-03-29 08:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 08:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2290 KB; ProcessInfo: 1045 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 280 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 158 KB; BaseEvent: 81 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12045 KB; 2026-03-29 08:45:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 08:45:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 08:45:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 08:45:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 08:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2290 KB; ProcessInfo: 1067 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 243 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 158 KB; BaseEvent: 91 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12043 KB; 2026-03-29 08:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2290 KB; ProcessInfo: 1073 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 236 KB; rules::ProcessConditionsCache: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 158 KB; BaseEvent: 94 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12033 KB; 2026-03-29 08:47:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 08:40:46, To:, 2026-03-29 08:47:29, Duration (s):, 403, Events Per Second:, 1.617, Events:, 653, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 583, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 67, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 76637 2026-03-29 08:47:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s388ms. 2026-03-29 08:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2290 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 226 KB; rules::ProcessConditionsCache: 219 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11666 KB; 2026-03-29 08:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2290 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11641 KB; 2026-03-29 08:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 08:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2290 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11646 KB; 2026-03-29 08:50:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 08:50:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 08:50:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 08:50:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 08:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2290 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11658 KB; 2026-03-29 08:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 2290 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11677 KB; 2026-03-29 08:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2290 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11676 KB; 2026-03-29 08:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2290 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11696 KB; 2026-03-29 08:54:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 08:47:32, To:, 2026-03-29 08:54:29, Duration (s):, 417, Events Per Second:, 0.194, Events:, 81, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 80, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13642 2026-03-29 08:54:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s937ms. 2026-03-29 08:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 08:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2290 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11603 KB; 2026-03-29 08:55:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 08:55:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 08:55:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 08:55:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 08:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2806 KB; ModuleMetadata: 2290 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11704 KB; 2026-03-29 08:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2847 KB; ModuleMetadata: 2290 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11747 KB; 2026-03-29 08:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2849 KB; ModuleMetadata: 2290 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11731 KB; 2026-03-29 08:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2909 KB; ModuleMetadata: 2290 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11791 KB; 2026-03-29 08:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 08:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 08:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2912 KB; ModuleMetadata: 2292 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11833 KB; 2026-03-29 09:00:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 09:00:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 09:00:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 09:00:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 09:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2916 KB; ModuleMetadata: 2292 KB; ProcessInfo: 931 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 334 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12101 KB; 2026-03-29 09:01:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 08:54:29, To:, 2026-03-29 09:01:29, Duration (s):, 420, Events Per Second:, 0.756, Events:, 318, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 315, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44144 2026-03-29 09:01:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s021ms. 2026-03-29 09:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2759 KB; ModuleMetadata: 2292 KB; ProcessInfo: 906 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 306 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11850 KB; 2026-03-29 09:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2764 KB; ModuleMetadata: 2292 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 311 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11874 KB; 2026-03-29 09:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2748 KB; ModuleMetadata: 2292 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 308 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11870 KB; 2026-03-29 09:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 09:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 2292 KB; ProcessInfo: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11834 KB; 2026-03-29 09:05:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 09:05:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 09:05:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 09:05:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 09:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2292 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 313 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11891 KB; 2026-03-29 09:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2292 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11911 KB; 2026-03-29 09:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2774 KB; ModuleMetadata: 2292 KB; ProcessInfo: 951 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 313 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11953 KB; 2026-03-29 09:08:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 09:01:29, To:, 2026-03-29 09:08:29, Duration (s):, 420, Events Per Second:, 0.340, Events:, 143, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 142, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21905 2026-03-29 09:08:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s661ms. 2026-03-29 09:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2292 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 296 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11775 KB; 2026-03-29 09:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 09:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2292 KB; ProcessInfo: 882 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 314 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11821 KB; 2026-03-29 09:10:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 09:10:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 09:10:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 09:10:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 09:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 2292 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11813 KB; 2026-03-29 09:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2739 KB; ModuleMetadata: 2292 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 301 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11805 KB; 2026-03-29 09:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2292 KB; ProcessInfo: 912 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11929 KB; 2026-03-29 09:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2746 KB; ModuleMetadata: 2292 KB; ProcessInfo: 912 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11872 KB; 2026-03-29 09:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 09:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2769 KB; ModuleMetadata: 2292 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11896 KB; 2026-03-29 09:15:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 09:08:29, To:, 2026-03-29 09:15:29, Duration (s):, 420, Events Per Second:, 0.641, Events:, 270, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 269, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35809 2026-03-29 09:15:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s629ms. 2026-03-29 09:15:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 09:15:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 09:15:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 09:15:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 09:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2292 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 305 KB; TcpIpConnectionsManager: 213 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11755 KB; 2026-03-29 09:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2292 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 305 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11718 KB; 2026-03-29 09:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2292 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11779 KB; 2026-03-29 09:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2292 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 311 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11761 KB; 2026-03-29 09:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 09:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2292 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11781 KB; 2026-03-29 09:20:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 09:20:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 09:20:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 09:20:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 09:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2292 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11772 KB; 2026-03-29 09:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2292 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11761 KB; 2026-03-29 09:22:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 09:15:29, To:, 2026-03-29 09:22:29, Duration (s):, 420, Events Per Second:, 0.347, Events:, 146, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 145, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19860 2026-03-29 09:22:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s667ms. 2026-03-29 09:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2292 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11667 KB; 2026-03-29 09:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2292 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11666 KB; 2026-03-29 09:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 09:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2292 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11692 KB; 2026-03-29 09:25:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 09:25:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 09:25:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 09:25:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 09:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2292 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11697 KB; 2026-03-29 09:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2292 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11684 KB; 2026-03-29 09:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2292 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11683 KB; 2026-03-29 09:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2292 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11689 KB; 2026-03-29 09:29:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 09:23:01, To:, 2026-03-29 09:29:29, Duration (s):, 388, Events Per Second:, 0.144, Events:, 56, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 55, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9294 2026-03-29 09:29:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s695ms. 2026-03-29 09:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:29:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 09:29:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:29:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 2292 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 331 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11707 KB; 2026-03-29 09:30:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 09:30:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 09:30:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 09:30:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 09:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2292 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 331 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11685 KB; 2026-03-29 09:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2292 KB; ProcessInfo: 794 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 331 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11689 KB; 2026-03-29 09:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2292 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 333 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11738 KB; 2026-03-29 09:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2292 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 347 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11771 KB; 2026-03-29 09:34:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:34:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 09:34:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:34:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2292 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 333 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11758 KB; 2026-03-29 09:35:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 09:35:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 09:35:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 09:35:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 09:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2292 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 333 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11739 KB; 2026-03-29 09:36:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 09:29:39, To:, 2026-03-29 09:36:29, Duration (s):, 410, Events Per Second:, 0.314, Events:, 129, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 128, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17948 2026-03-29 09:36:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s677ms. 2026-03-29 09:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2292 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 335 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11709 KB; 2026-03-29 09:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2292 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 333 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11705 KB; 2026-03-29 09:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2292 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11600 KB; 2026-03-29 09:39:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:39:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 09:39:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:39:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2292 KB; ProcessInfo: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 209 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 58 KB; rules::ProcessConditionsCache: 45 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11646 KB; 2026-03-29 09:40:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 09:40:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 09:40:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 09:40:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 09:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2292 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11711 KB; 2026-03-29 09:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2292 KB; ProcessInfo: 948 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 210 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 58 KB; rules::ProcessConditionsCache: 43 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11668 KB; 2026-03-29 09:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2292 KB; ProcessInfo: 973 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 58 KB; BaseEvent: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11714 KB; 2026-03-29 09:43:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 09:37:10, To:, 2026-03-29 09:43:29, Duration (s):, 379, Events Per Second:, 1.406, Events:, 534, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 511, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 65161 2026-03-29 09:43:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s832ms. 2026-03-29 09:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2292 KB; ProcessInfo: 1145 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 408 KB; ModuleInfoCache: 402 KB; TcpIpConnectionsManager: 335 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 157 KB; BaseEvent: 139 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12438 KB; 2026-03-29 09:44:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:44:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 09:44:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:44:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2292 KB; ProcessInfo: 1164 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 326 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 157 KB; BaseEvent: 144 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12076 KB; 2026-03-29 09:45:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 09:45:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 09:45:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 09:45:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 09:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2292 KB; ProcessInfo: 1164 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 326 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; cloudutils::CloudData: 157 KB; BaseEvent: 146 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12085 KB; 2026-03-29 09:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2292 KB; ProcessInfo: 1164 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 157 KB; BaseEvent: 146 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11949 KB; 2026-03-29 09:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2292 KB; ProcessInfo: 1170 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 157 KB; BaseEvent: 147 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 46 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11963 KB; 2026-03-29 09:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2292 KB; ProcessInfo: 1172 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 157 KB; BaseEvent: 149 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11949 KB; 2026-03-29 09:49:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:49:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 09:49:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:49:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2292 KB; ProcessInfo: 1199 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 157 KB; BaseEvent: 154 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12070 KB; 2026-03-29 09:50:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 09:43:29, To:, 2026-03-29 09:50:29, Duration (s):, 420, Events Per Second:, 2.176, Events:, 916, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 776, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 139, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 106324 2026-03-29 09:50:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s685ms. 2026-03-29 09:50:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 09:50:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 09:50:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 09:50:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 09:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2292 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11484 KB; 2026-03-29 09:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2292 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 47 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11465 KB; 2026-03-29 09:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2739 KB; ModuleMetadata: 2292 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11481 KB; 2026-03-29 09:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2292 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11446 KB; 2026-03-29 09:54:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:54:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 09:54:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:54:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 2292 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 47 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11450 KB; 2026-03-29 09:55:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 09:55:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 09:55:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 09:55:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 09:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 2292 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11468 KB; 2026-03-29 09:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2292 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11484 KB; 2026-03-29 09:57:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 09:50:29, To:, 2026-03-29 09:57:29, Duration (s):, 420, Events Per Second:, 0.181, Events:, 76, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 75, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12975 2026-03-29 09:57:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s604ms. 2026-03-29 09:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2810 KB; ModuleMetadata: 2292 KB; ProcessInfo: 800 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11509 KB; 2026-03-29 09:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2773 KB; ModuleMetadata: 2292 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11559 KB; 2026-03-29 09:59:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:59:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 09:59:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 09:59:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2796 KB; ModuleMetadata: 2293 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11614 KB; 2026-03-29 10:00:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 10:00:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 10:00:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 10:00:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 10:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2797 KB; ModuleMetadata: 2293 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11609 KB; 2026-03-29 10:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2798 KB; ModuleMetadata: 2293 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11581 KB; 2026-03-29 10:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2740 KB; ModuleMetadata: 2293 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11710 KB; 2026-03-29 10:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2293 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11594 KB; 2026-03-29 10:04:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 09:57:29, To:, 2026-03-29 10:04:29, Duration (s):, 420, Events Per Second:, 0.620, Events:, 261, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 255, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33800 2026-03-29 10:04:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s895ms. 2026-03-29 10:04:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:04:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 10:04:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:04:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2293 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11494 KB; 2026-03-29 10:05:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 10:05:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 10:05:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 10:05:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 10:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2293 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11475 KB; 2026-03-29 10:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2293 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11453 KB; 2026-03-29 10:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2293 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11486 KB; 2026-03-29 10:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2293 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11557 KB; 2026-03-29 10:09:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:09:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 10:09:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:09:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2293 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 84 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11588 KB; 2026-03-29 10:10:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 10:10:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 10:10:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 10:10:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 10:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2293 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 202 KB; rules::ProcessConditionsCache: 163 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11749 KB; 2026-03-29 10:11:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 10:05:00, To:, 2026-03-29 10:11:29, Duration (s):, 389, Events Per Second:, 0.667, Events:, 260, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 257, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36690 2026-03-29 10:11:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s808ms. 2026-03-29 10:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2293 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11581 KB; 2026-03-29 10:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2293 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 84 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11591 KB; 2026-03-29 10:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2293 KB; ProcessInfo: 906 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11631 KB; 2026-03-29 10:14:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:14:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 10:14:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:14:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2295 KB; ProcessInfo: 923 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11625 KB; 2026-03-29 10:15:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 10:15:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 10:15:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 10:15:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 10:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2295 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 212 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 84 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11627 KB; 2026-03-29 10:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2295 KB; ProcessInfo: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11613 KB; 2026-03-29 10:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2295 KB; ProcessInfo: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11602 KB; 2026-03-29 10:18:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 10:11:29, To:, 2026-03-29 10:18:29, Duration (s):, 420, Events Per Second:, 0.423, Events:, 178, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 177, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27715 2026-03-29 10:18:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s666ms. 2026-03-29 10:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2295 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11433 KB; 2026-03-29 10:19:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:19:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 10:19:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:19:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2295 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 104 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11477 KB; 2026-03-29 10:20:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 10:20:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 10:20:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 10:20:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 10:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2295 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 211 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11490 KB; 2026-03-29 10:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2295 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 95 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11493 KB; 2026-03-29 10:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2295 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 95 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11486 KB; 2026-03-29 10:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2295 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 95 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11459 KB; 2026-03-29 10:24:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:24:50 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 10:24:50 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:24:50 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2295 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11469 KB; 2026-03-29 10:25:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 10:18:37, To:, 2026-03-29 10:25:29, Duration (s):, 412, Events Per Second:, 0.199, Events:, 82, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 81, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12461 2026-03-29 10:25:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s147ms. 2026-03-29 10:25:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 10:25:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 10:25:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 10:25:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 10:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2295 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 101 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11445 KB; 2026-03-29 10:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2295 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 286 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 241 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11801 KB; 2026-03-29 10:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2295 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 378 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 261 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12004 KB; 2026-03-29 10:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2295 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11758 KB; 2026-03-29 10:29:50 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:29:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 10:29:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:29:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2295 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11756 KB; 2026-03-29 10:30:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 10:30:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 10:30:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 10:30:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 10:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2295 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 163 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11815 KB; 2026-03-29 10:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2295 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 148 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11722 KB; 2026-03-29 10:32:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 10:25:46, To:, 2026-03-29 10:32:29, Duration (s):, 403, Events Per Second:, 0.889, Events:, 359, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 358, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 45154 2026-03-29 10:32:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s921ms. 2026-03-29 10:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2295 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 217 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11759 KB; 2026-03-29 10:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2295 KB; ProcessInfo: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 290 KB; rules::ProcessConditionsCache: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11912 KB; 2026-03-29 10:34:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:34:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 10:34:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:34:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2295 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11825 KB; 2026-03-29 10:35:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 10:35:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 10:35:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 10:35:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 10:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2746 KB; ModuleMetadata: 2295 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11968 KB; 2026-03-29 10:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2766 KB; ModuleMetadata: 2295 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 153 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11910 KB; 2026-03-29 10:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2768 KB; ModuleMetadata: 2295 KB; ProcessInfo: 979 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 153 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11877 KB; 2026-03-29 10:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2769 KB; ModuleMetadata: 2295 KB; ProcessInfo: 982 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 153 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11844 KB; 2026-03-29 10:39:29 7967594126c0 Info: Events Statistics, From:, 2026-03-29 10:32:47, To:, 2026-03-29 10:39:29, Duration (s):, 402, Events Per Second:, 1.283, Events:, 517, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 516, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 61520 2026-03-29 10:39:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s307ms. 2026-03-29 10:39:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:39:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 10:39:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:39:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2770 KB; ModuleMetadata: 2295 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 184 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11655 KB; 2026-03-29 10:40:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 10:40:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 10:40:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 10:40:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 10:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2295 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11645 KB; 2026-03-29 10:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2295 KB; ProcessInfo: 882 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 210 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11654 KB; 2026-03-29 10:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2295 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11669 KB; 2026-03-29 10:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2295 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11701 KB; 2026-03-29 10:44:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:44:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 10:44:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:44:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2296 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11758 KB; 2026-03-29 10:45:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 10:45:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 10:45:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 10:45:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 10:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2296 KB; ProcessInfo: 941 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11766 KB; 2026-03-29 10:46:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 10:40:13, To:, 2026-03-29 10:46:30, Duration (s):, 377, Events Per Second:, 0.650, Events:, 245, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 244, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31021 2026-03-29 10:46:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s806ms. 2026-03-29 10:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2296 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 171 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11654 KB; 2026-03-29 10:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2296 KB; ProcessInfo: 904 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 252 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11803 KB; 2026-03-29 10:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2296 KB; ProcessInfo: 904 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11755 KB; 2026-03-29 10:49:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:49:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 10:49:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:49:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2296 KB; ProcessInfo: 1097 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 367 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 157 KB; BaseEvent: 107 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12308 KB; 2026-03-29 10:50:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 10:50:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 10:50:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 10:50:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 10:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2296 KB; ProcessInfo: 1097 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 367 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 305 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 157 KB; BaseEvent: 108 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12300 KB; 2026-03-29 10:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2296 KB; ProcessInfo: 1097 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 367 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 157 KB; BaseEvent: 109 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12276 KB; 2026-03-29 10:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2296 KB; ProcessInfo: 1097 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 367 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 157 KB; BaseEvent: 112 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12187 KB; 2026-03-29 10:53:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 10:46:40, To:, 2026-03-29 10:53:30, Duration (s):, 410, Events Per Second:, 1.629, Events:, 668, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 582, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 85, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 77829 2026-03-29 10:53:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s867ms. 2026-03-29 10:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2296 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 366 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11769 KB; 2026-03-29 10:54:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:54:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 10:54:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:54:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2296 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 402 KB; rules::ProcessConditionsCache: 369 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11777 KB; 2026-03-29 10:55:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 10:55:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 10:55:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 10:55:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 10:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2296 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11554 KB; 2026-03-29 10:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2296 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11584 KB; 2026-03-29 10:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2728 KB; ModuleMetadata: 2296 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11579 KB; 2026-03-29 10:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2790 KB; ModuleMetadata: 2296 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 402 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 157 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11621 KB; 2026-03-29 10:59:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:59:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 10:59:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 10:59:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2868 KB; ModuleMetadata: 2303 KB; ProcessInfo: 887 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 49 KB; rules::ProcessConditionsCache: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11721 KB; 2026-03-29 11:00:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 10:53:43, To:, 2026-03-29 11:00:30, Duration (s):, 407, Events Per Second:, 0.580, Events:, 236, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 235, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30842 2026-03-29 11:00:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s677ms. 2026-03-29 11:00:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 11:00:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 11:00:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 11:00:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 11:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2870 KB; ModuleMetadata: 2303 KB; ProcessInfo: 816 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11612 KB; 2026-03-29 11:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2303 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11521 KB; 2026-03-29 11:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2303 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11521 KB; 2026-03-29 11:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2303 KB; ProcessInfo: 868 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11657 KB; 2026-03-29 11:04:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:04:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 11:04:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:04:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2303 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11544 KB; 2026-03-29 11:05:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 11:05:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 11:05:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 11:05:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 11:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2303 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11559 KB; 2026-03-29 11:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2303 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11560 KB; 2026-03-29 11:07:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 11:00:41, To:, 2026-03-29 11:07:30, Duration (s):, 409, Events Per Second:, 0.367, Events:, 150, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 149, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19882 2026-03-29 11:07:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s661ms. 2026-03-29 11:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2746 KB; ModuleMetadata: 2303 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11485 KB; 2026-03-29 11:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2749 KB; ModuleMetadata: 2303 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11564 KB; 2026-03-29 11:09:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:09:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 11:09:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:09:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2303 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11568 KB; 2026-03-29 11:10:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 11:10:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 11:10:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 11:10:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 11:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2303 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11582 KB; 2026-03-29 11:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2303 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 101 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11671 KB; 2026-03-29 11:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2303 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 209 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11618 KB; 2026-03-29 11:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2303 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11650 KB; 2026-03-29 11:14:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 11:08:29, To:, 2026-03-29 11:14:30, Duration (s):, 361, Events Per Second:, 0.762, Events:, 275, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 274, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35302 2026-03-29 11:14:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s670ms. 2026-03-29 11:14:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:14:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 11:14:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:14:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2303 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 229 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11538 KB; 2026-03-29 11:15:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 11:15:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 11:15:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 11:15:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 11:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2303 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 219 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11529 KB; 2026-03-29 11:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2303 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11675 KB; 2026-03-29 11:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2303 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11621 KB; 2026-03-29 11:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2303 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11620 KB; 2026-03-29 11:19:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:19:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 11:19:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:19:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2303 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11607 KB; 2026-03-29 11:20:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 11:20:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 11:20:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 11:20:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 11:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2303 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11594 KB; 2026-03-29 11:21:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 11:14:32, To:, 2026-03-29 11:21:30, Duration (s):, 418, Events Per Second:, 0.421, Events:, 176, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 175, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23370 2026-03-29 11:21:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s674ms. 2026-03-29 11:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2303 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11467 KB; 2026-03-29 11:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2303 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11465 KB; 2026-03-29 11:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2303 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11456 KB; 2026-03-29 11:24:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:24:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 11:24:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:24:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2303 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11469 KB; 2026-03-29 11:25:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 11:25:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 11:25:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 11:25:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 11:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2699 KB; ModuleMetadata: 2303 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11578 KB; 2026-03-29 11:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2303 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11553 KB; 2026-03-29 11:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2303 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11625 KB; 2026-03-29 11:28:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 11:22:02, To:, 2026-03-29 11:28:30, Duration (s):, 388, Events Per Second:, 0.430, Events:, 167, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 160, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22094 2026-03-29 11:28:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s513ms. 2026-03-29 11:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2303 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11571 KB; 2026-03-29 11:29:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:29:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 11:29:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:29:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2303 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11635 KB; 2026-03-29 11:30:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 11:30:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 11:30:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 11:30:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 11:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2303 KB; ProcessInfo: 884 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11647 KB; 2026-03-29 11:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2303 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11658 KB; 2026-03-29 11:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2303 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 126 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11702 KB; 2026-03-29 11:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 2303 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11774 KB; 2026-03-29 11:34:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:34:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 11:34:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:34:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2777 KB; ModuleMetadata: 2303 KB; ProcessInfo: 963 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 120 KB; BaseEvent: 51 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11877 KB; 2026-03-29 11:35:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 11:29:27, To:, 2026-03-29 11:35:30, Duration (s):, 363, Events Per Second:, 1.105, Events:, 401, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 330, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 35, Livegrid:, 35, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48122 2026-03-29 11:35:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s816ms. 2026-03-29 11:35:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 11:35:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 11:35:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 11:35:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 11:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2303 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11711 KB; 2026-03-29 11:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2303 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11665 KB; 2026-03-29 11:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2303 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11669 KB; 2026-03-29 11:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2303 KB; ProcessInfo: 985 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 138 KB; BaseEvent: 83 KB; ProcessInfoCommandLineTag: 60 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11866 KB; 2026-03-29 11:39:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:39:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 11:39:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:39:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2303 KB; ProcessInfo: 991 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 131 KB; BaseEvent: 84 KB; ProcessInfoCommandLineTag: 60 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11845 KB; 2026-03-29 11:40:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 11:40:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 11:40:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 11:40:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 11:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2768 KB; ModuleMetadata: 2303 KB; ProcessInfo: 991 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 129 KB; BaseEvent: 86 KB; ProcessInfoCommandLineTag: 60 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11907 KB; 2026-03-29 11:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2847 KB; ModuleMetadata: 2303 KB; ProcessInfo: 992 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 131 KB; BaseEvent: 87 KB; ProcessInfoCommandLineTag: 60 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11978 KB; 2026-03-29 11:42:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 11:35:28, To:, 2026-03-29 11:42:30, Duration (s):, 422, Events Per Second:, 1.147, Events:, 484, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 297, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 93, Livegrid:, 93, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56268 2026-03-29 11:42:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s370ms. 2026-03-29 11:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2849 KB; ModuleMetadata: 2303 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 129 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11657 KB; 2026-03-29 11:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2835 KB; ModuleMetadata: 2303 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 129 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11644 KB; 2026-03-29 11:44:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:44:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 11:44:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:44:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2838 KB; ModuleMetadata: 2306 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11787 KB; 2026-03-29 11:45:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 11:45:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 11:45:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 11:45:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 11:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2306 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 267 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11917 KB; 2026-03-29 11:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2306 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 158 KB; BaseEvent: 47 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11819 KB; 2026-03-29 11:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2306 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 158 KB; BaseEvent: 47 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11825 KB; 2026-03-29 11:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2306 KB; ProcessInfo: 917 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 207 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 158 KB; BaseEvent: 52 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11778 KB; 2026-03-29 11:49:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 11:43:03, To:, 2026-03-29 11:49:30, Duration (s):, 387, Events Per Second:, 0.915, Events:, 354, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 278, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41784 2026-03-29 11:49:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s829ms. 2026-03-29 11:49:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:49:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 11:49:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:49:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2306 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; rules::ProcessConditionsCache: 189 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11590 KB; 2026-03-29 11:50:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 11:50:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 11:50:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 11:50:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 11:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2306 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; rules::ProcessConditionsCache: 189 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11597 KB; 2026-03-29 11:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2306 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; rules::ProcessConditionsCache: 191 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11605 KB; 2026-03-29 11:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2306 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 227 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11691 KB; 2026-03-29 11:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2697 KB; ModuleMetadata: 2306 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11720 KB; 2026-03-29 11:54:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:54:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 11:54:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:54:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2306 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 286 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11909 KB; 2026-03-29 11:55:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 11:55:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 11:55:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 11:55:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 11:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2306 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11811 KB; 2026-03-29 11:56:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 11:49:36, To:, 2026-03-29 11:56:30, Duration (s):, 414, Events Per Second:, 0.667, Events:, 276, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 275, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34907 2026-03-29 11:56:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s176ms. 2026-03-29 11:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2306 KB; ProcessInfo: 923 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 295 KB; rules::ProcessConditionsCache: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11881 KB; 2026-03-29 11:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2306 KB; ProcessInfo: 951 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 315 KB; rules::ProcessConditionsCache: 229 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11912 KB; 2026-03-29 11:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2306 KB; ProcessInfo: 975 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 294 KB; rules::ProcessConditionsCache: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11929 KB; 2026-03-29 11:59:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:59:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 11:59:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 11:59:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2306 KB; ProcessInfo: 994 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11922 KB; 2026-03-29 12:00:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 12:00:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 12:00:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 12:00:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 12:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2306 KB; ProcessInfo: 1073 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 271 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 54 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12064 KB; 2026-03-29 12:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2306 KB; ProcessInfo: 1120 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 315 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 158 KB; BaseEvent: 64 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12202 KB; 2026-03-29 12:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2306 KB; ProcessInfo: 1122 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 273 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 158 KB; BaseEvent: 69 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12151 KB; 2026-03-29 12:03:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 11:56:35, To:, 2026-03-29 12:03:30, Duration (s):, 415, Events Per Second:, 1.597, Events:, 663, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 652, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 81108 2026-03-29 12:03:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s821ms. 2026-03-29 12:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2701 KB; ModuleMetadata: 2306 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 265 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11847 KB; 2026-03-29 12:04:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:04:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 12:04:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:04:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2306 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11839 KB; 2026-03-29 12:05:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 12:05:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 12:05:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 12:05:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 12:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2306 KB; ProcessInfo: 969 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 267 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11875 KB; 2026-03-29 12:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2306 KB; ProcessInfo: 969 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11868 KB; 2026-03-29 12:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2306 KB; ProcessInfo: 972 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11881 KB; 2026-03-29 12:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2306 KB; ProcessInfo: 1017 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 60 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11931 KB; 2026-03-29 12:09:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:09:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 12:09:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:09:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2306 KB; ProcessInfo: 1023 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 60 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11947 KB; 2026-03-29 12:10:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 12:03:29, To:, 2026-03-29 12:10:30, Duration (s):, 421, Events Per Second:, 0.577, Events:, 243, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 242, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33408 2026-03-29 12:10:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s698ms. 2026-03-29 12:10:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 12:10:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 12:10:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 12:10:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 12:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2306 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11799 KB; 2026-03-29 12:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2306 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11798 KB; 2026-03-29 12:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2306 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11797 KB; 2026-03-29 12:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2306 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11797 KB; 2026-03-29 12:14:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:14:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 12:14:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:14:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2307 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11798 KB; 2026-03-29 12:15:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 12:15:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 12:15:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 12:15:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 12:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2307 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 337 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11958 KB; 2026-03-29 12:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2307 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 368 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12050 KB; 2026-03-29 12:17:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 12:10:46, To:, 2026-03-29 12:17:30, Duration (s):, 404, Events Per Second:, 0.772, Events:, 312, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 223, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 44, Livegrid:, 44, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38271 2026-03-29 12:17:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s556ms. 2026-03-29 12:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2307 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 302 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11852 KB; 2026-03-29 12:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2783 KB; ModuleMetadata: 2307 KB; ProcessInfo: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11992 KB; 2026-03-29 12:19:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:19:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 12:19:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:19:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2746 KB; ModuleMetadata: 2307 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 309 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11920 KB; 2026-03-29 12:20:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 12:20:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 12:20:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 12:20:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 12:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2747 KB; ModuleMetadata: 2307 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 311 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11901 KB; 2026-03-29 12:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2307 KB; ProcessInfo: 953 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 318 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11924 KB; 2026-03-29 12:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2307 KB; ProcessInfo: 962 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 320 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11938 KB; 2026-03-29 12:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2307 KB; ProcessInfo: 966 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 313 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11938 KB; 2026-03-29 12:24:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 12:17:29, To:, 2026-03-29 12:24:30, Duration (s):, 421, Events Per Second:, 0.503, Events:, 212, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 211, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29222 2026-03-29 12:24:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s973ms. 2026-03-29 12:24:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:24:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 12:24:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:24:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2307 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 314 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11771 KB; 2026-03-29 12:25:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 12:25:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 12:25:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 12:25:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 12:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2700 KB; ModuleMetadata: 2307 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 311 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11749 KB; 2026-03-29 12:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2307 KB; ProcessInfo: 850 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11764 KB; 2026-03-29 12:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2307 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11769 KB; 2026-03-29 12:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2307 KB; ProcessInfo: 863 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11790 KB; 2026-03-29 12:29:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:29:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 12:29:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:29:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2307 KB; ProcessInfo: 916 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 377 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11970 KB; 2026-03-29 12:30:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 12:30:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 12:30:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 12:30:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 12:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2307 KB; ProcessInfo: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 322 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11911 KB; 2026-03-29 12:31:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 12:24:30, To:, 2026-03-29 12:31:30, Duration (s):, 420, Events Per Second:, 0.476, Events:, 200, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 199, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26696 2026-03-29 12:31:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s669ms. 2026-03-29 12:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2307 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 325 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11856 KB; 2026-03-29 12:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2307 KB; ProcessInfo: 885 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 327 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11860 KB; 2026-03-29 12:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2307 KB; ProcessInfo: 885 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11844 KB; 2026-03-29 12:34:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:34:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 12:34:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:34:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2307 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11845 KB; 2026-03-29 12:35:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 12:35:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 12:35:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 12:35:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 12:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2307 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11830 KB; 2026-03-29 12:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2307 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11833 KB; 2026-03-29 12:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2307 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 344 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11871 KB; 2026-03-29 12:38:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 12:31:53, To:, 2026-03-29 12:38:30, Duration (s):, 397, Events Per Second:, 0.378, Events:, 150, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 119, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 15, Livegrid:, 15, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21900 2026-03-29 12:38:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s617ms. 2026-03-29 12:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2307 KB; ProcessInfo: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11703 KB; 2026-03-29 12:39:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:39:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 12:39:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:39:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2307 KB; ProcessInfo: 942 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 63 KB; rules::ProcessConditionsCache: 42 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11708 KB; 2026-03-29 12:40:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 12:40:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 12:40:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 12:40:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 12:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2770 KB; ModuleMetadata: 2307 KB; ProcessInfo: 948 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 64 KB; rules::ProcessConditionsCache: 48 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11787 KB; 2026-03-29 12:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2889 KB; ModuleMetadata: 2307 KB; ProcessInfo: 948 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 223 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 64 KB; rules::ProcessConditionsCache: 54 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11876 KB; 2026-03-29 12:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 3009 KB; ModuleMetadata: 2307 KB; ProcessInfo: 970 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 84 KB; ProcessInfoCommandLineTag: 64 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12036 KB; 2026-03-29 12:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2813 KB; ModuleMetadata: 2307 KB; ProcessInfo: 976 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 64 KB; rules::ProcessConditionsCache: 56 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11825 KB; 2026-03-29 12:44:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:44:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 12:44:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:44:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2813 KB; ModuleMetadata: 2307 KB; ProcessInfo: 991 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11878 KB; 2026-03-29 12:45:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 12:38:24, To:, 2026-03-29 12:45:30, Duration (s):, 426, Events Per Second:, 1.030, Events:, 439, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 438, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 60186 2026-03-29 12:45:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s483ms. 2026-03-29 12:45:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 12:45:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 12:45:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 12:45:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 12:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2307 KB; ProcessInfo: 917 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 133 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11762 KB; 2026-03-29 12:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2307 KB; ProcessInfo: 967 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 160 KB; BaseEvent: 57 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11891 KB; 2026-03-29 12:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2307 KB; ProcessInfo: 991 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 160 KB; BaseEvent: 63 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11943 KB; 2026-03-29 12:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2725 KB; ModuleMetadata: 2307 KB; ProcessInfo: 997 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 160 KB; BaseEvent: 66 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11939 KB; 2026-03-29 12:49:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:49:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 12:49:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:49:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2727 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1001 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 213 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 160 KB; BaseEvent: 68 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11920 KB; 2026-03-29 12:50:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 12:50:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 12:50:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 12:50:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 12:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1001 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 192 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; BaseEvent: 69 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11905 KB; 2026-03-29 12:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2730 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1003 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; rules::ProcessConditionsCache: 192 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; BaseEvent: 69 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11908 KB; 2026-03-29 12:52:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 12:45:33, To:, 2026-03-29 12:52:30, Duration (s):, 417, Events Per Second:, 1.021, Events:, 426, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 369, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 56, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51244 2026-03-29 12:52:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s812ms. 2026-03-29 12:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2307 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; rules::ProcessConditionsCache: 188 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11623 KB; 2026-03-29 12:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2307 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; rules::ProcessConditionsCache: 188 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11626 KB; 2026-03-29 12:54:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:54:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 12:54:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:54:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2307 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; rules::ProcessConditionsCache: 197 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11631 KB; 2026-03-29 12:55:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 12:55:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 12:55:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 12:55:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 12:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2307 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; rules::ProcessConditionsCache: 195 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11624 KB; 2026-03-29 12:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2307 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 281 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11824 KB; 2026-03-29 12:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2307 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11734 KB; 2026-03-29 12:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2307 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11759 KB; 2026-03-29 12:59:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 12:53:21, To:, 2026-03-29 12:59:30, Duration (s):, 369, Events Per Second:, 0.439, Events:, 162, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 161, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21594 2026-03-29 12:59:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s668ms. 2026-03-29 12:59:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:59:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 12:59:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 12:59:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2307 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; TcpIpConnectionsManager: 230 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11755 KB; 2026-03-29 13:00:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 13:00:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 13:00:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 13:00:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 13:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2307 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; rules::ProcessConditionsCache: 218 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11734 KB; 2026-03-29 13:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2307 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; rules::ProcessConditionsCache: 221 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11764 KB; 2026-03-29 13:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2307 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 221 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11776 KB; 2026-03-29 13:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2307 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::ProcessConditionsCache: 216 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11777 KB; 2026-03-29 13:04:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:04:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 13:04:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:04:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2307 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::ProcessConditionsCache: 223 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11785 KB; 2026-03-29 13:05:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 13:05:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 13:05:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 13:05:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 13:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2724 KB; ModuleMetadata: 2307 KB; ProcessInfo: 904 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::ProcessConditionsCache: 223 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11803 KB; 2026-03-29 13:06:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 12:59:47, To:, 2026-03-29 13:06:30, Duration (s):, 403, Events Per Second:, 0.293, Events:, 118, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 117, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17780 2026-03-29 13:06:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s641ms. 2026-03-29 13:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2704 KB; ModuleMetadata: 2307 KB; ProcessInfo: 840 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; rules::ProcessConditionsCache: 231 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11700 KB; 2026-03-29 13:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2307 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 231 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11732 KB; 2026-03-29 13:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2307 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::ProcessConditionsCache: 242 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11840 KB; 2026-03-29 13:09:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:09:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 13:09:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:09:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2307 KB; ProcessInfo: 904 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; rules::ProcessConditionsCache: 224 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11789 KB; 2026-03-29 13:10:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 13:10:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 13:10:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 13:10:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 13:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2307 KB; ProcessInfo: 906 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; rules::ProcessConditionsCache: 222 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11788 KB; 2026-03-29 13:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2749 KB; ModuleMetadata: 2307 KB; ProcessInfo: 906 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::ProcessConditionsCache: 222 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11826 KB; 2026-03-29 13:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2751 KB; ModuleMetadata: 2307 KB; ProcessInfo: 906 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::ProcessConditionsCache: 222 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11824 KB; 2026-03-29 13:13:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 13:06:31, To:, 2026-03-29 13:13:30, Duration (s):, 419, Events Per Second:, 0.544, Events:, 228, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 227, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30906 2026-03-29 13:13:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s080ms. 2026-03-29 13:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2752 KB; ModuleMetadata: 2307 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::ProcessConditionsCache: 222 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11687 KB; 2026-03-29 13:14:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:14:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 13:14:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:14:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2753 KB; ModuleMetadata: 2307 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::ProcessConditionsCache: 222 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11689 KB; 2026-03-29 13:15:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 13:15:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 13:15:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 13:15:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 13:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2307 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; rules::ProcessConditionsCache: 226 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11700 KB; 2026-03-29 13:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2307 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; rules::ProcessConditionsCache: 227 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11702 KB; 2026-03-29 13:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2743 KB; ModuleMetadata: 2307 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; rules::ProcessConditionsCache: 227 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11707 KB; 2026-03-29 13:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2745 KB; ModuleMetadata: 2307 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; rules::ProcessConditionsCache: 231 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11711 KB; 2026-03-29 13:19:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:19:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 13:19:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:19:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2726 KB; ModuleMetadata: 2307 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11691 KB; 2026-03-29 13:20:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 13:15:00, To:, 2026-03-29 13:20:30, Duration (s):, 330, Events Per Second:, 0.218, Events:, 72, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 71, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 11685 2026-03-29 13:20:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s595ms. 2026-03-29 13:20:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 13:20:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 13:20:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 13:20:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 13:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2729 KB; ModuleMetadata: 2307 KB; ProcessInfo: 862 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 277 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11824 KB; 2026-03-29 13:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2307 KB; ProcessInfo: 919 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 347 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 302 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12018 KB; 2026-03-29 13:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2307 KB; ProcessInfo: 919 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 298 KB; rules::ProcessConditionsCache: 235 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11889 KB; 2026-03-29 13:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2307 KB; ProcessInfo: 926 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 271 KB; rules::ProcessConditionsCache: 242 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11883 KB; 2026-03-29 13:24:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:24:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 13:24:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:24:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2307 KB; ProcessInfo: 997 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 332 KB; TcpIpConnectionsManager: 308 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12120 KB; 2026-03-29 13:25:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 13:25:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 13:25:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 13:25:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 13:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2722 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1026 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 323 KB; TcpIpConnectionsManager: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 160 KB; BaseEvent: 51 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12160 KB; 2026-03-29 13:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2702 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1048 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 317 KB; rules::ProcessConditionsCache: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 160 KB; BaseEvent: 57 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12131 KB; 2026-03-29 13:27:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 13:20:31, To:, 2026-03-29 13:27:30, Duration (s):, 419, Events Per Second:, 1.544, Events:, 647, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 646, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 78524 2026-03-29 13:27:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s903ms. 2026-03-29 13:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2307 KB; ProcessInfo: 981 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 331 KB; rules::ProcessConditionsCache: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12070 KB; 2026-03-29 13:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1003 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 321 KB; rules::ProcessConditionsCache: 291 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12044 KB; 2026-03-29 13:29:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:29:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 13:29:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:29:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1010 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 279 KB; rules::ProcessConditionsCache: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11971 KB; 2026-03-29 13:30:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 13:30:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 13:30:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 13:30:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 13:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1010 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 247 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11940 KB; 2026-03-29 13:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1011 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11916 KB; 2026-03-29 13:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1013 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11915 KB; 2026-03-29 13:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1014 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11935 KB; 2026-03-29 13:34:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 13:27:29, To:, 2026-03-29 13:34:30, Duration (s):, 421, Events Per Second:, 0.532, Events:, 224, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 215, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32091 2026-03-29 13:34:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s678ms. 2026-03-29 13:34:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:34:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 13:34:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:34:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2307 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11695 KB; 2026-03-29 13:35:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 13:35:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 13:35:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 13:35:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 13:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2705 KB; ModuleMetadata: 2307 KB; ProcessInfo: 906 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 280 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11879 KB; 2026-03-29 13:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2307 KB; ProcessInfo: 920 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 279 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 139 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11845 KB; 2026-03-29 13:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2706 KB; ModuleMetadata: 2307 KB; ProcessInfo: 925 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 305 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11705 KB; 2026-03-29 13:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1026 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 308 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 64 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11901 KB; 2026-03-29 13:39:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:39:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 13:39:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:39:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1039 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 66 KB; rules::ProcessConditionsCache: 58 KB; BaseEvent: 53 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11878 KB; 2026-03-29 13:40:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 13:40:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 13:40:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 13:40:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 13:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2711 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1070 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 63 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11948 KB; 2026-03-29 13:41:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 13:35:00, To:, 2026-03-29 13:41:30, Duration (s):, 390, Events Per Second:, 1.763, Events:, 688, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 687, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 84254 2026-03-29 13:41:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s666ms. 2026-03-29 13:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2307 KB; ProcessInfo: 962 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 65 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11689 KB; 2026-03-29 13:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2307 KB; ProcessInfo: 988 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11820 KB; 2026-03-29 13:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2793 KB; ModuleMetadata: 2307 KB; ProcessInfo: 1011 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 91 KB; ProcessInfoCommandLineTag: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11903 KB; 2026-03-29 13:44:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:44:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 13:44:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:44:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1036 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 65 KB; rules::ProcessConditionsCache: 61 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11827 KB; 2026-03-29 13:45:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 13:45:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 13:45:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 13:45:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 13:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2703 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1098 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12117 KB; 2026-03-29 13:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1122 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 138 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12089 KB; 2026-03-29 13:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2708 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1280 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 313 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 160 KB; BaseEvent: 106 KB; ProcessInfoCommandLineTag: 71 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12348 KB; 2026-03-29 13:48:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 13:41:30, To:, 2026-03-29 13:48:30, Duration (s):, 420, Events Per Second:, 2.163, Events:, 909, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 853, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 10, Livegrid:, 10, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 106116 2026-03-29 13:48:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s743ms. 2026-03-29 13:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2707 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1128 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; TcpIpConnectionsManager: 344 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12169 KB; 2026-03-29 13:49:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:49:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 13:49:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:49:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1172 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 320 KB; rules::ProcessConditionsCache: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 51 KB; BaseEvent: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12233 KB; 2026-03-29 13:50:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 13:50:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 13:50:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 13:50:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 13:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1176 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 271 KB; rules::ProcessConditionsCache: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; BaseEvent: 53 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12200 KB; 2026-03-29 13:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1176 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 160 KB; BaseEvent: 54 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12153 KB; 2026-03-29 13:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1194 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 302 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; BaseEvent: 58 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12214 KB; 2026-03-29 13:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1208 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 302 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 160 KB; BaseEvent: 62 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12253 KB; 2026-03-29 13:54:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:54:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 13:54:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:54:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1241 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 287 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; BaseEvent: 72 KB; ProcessInfoCommandLineTag: 52 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12316 KB; 2026-03-29 13:55:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 13:48:31, To:, 2026-03-29 13:55:30, Duration (s):, 419, Events Per Second:, 1.214, Events:, 509, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 470, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 61109 2026-03-29 13:55:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s665ms. 2026-03-29 13:55:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 13:55:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 13:55:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 13:55:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 13:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2709 KB; ModuleMetadata: 2309 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 274 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11799 KB; 2026-03-29 13:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2309 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 280 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11811 KB; 2026-03-29 13:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2309 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11815 KB; 2026-03-29 13:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2716 KB; ModuleMetadata: 2309 KB; ProcessInfo: 913 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11885 KB; 2026-03-29 13:59:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:59:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 13:59:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 13:59:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2796 KB; ModuleMetadata: 2309 KB; ProcessInfo: 984 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 140 KB; ProcessInfoCommandLineTag: 50 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11966 KB; 2026-03-29 14:00:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 14:00:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 14:00:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 14:00:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 14:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2757 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1009 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 308 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 50 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11948 KB; 2026-03-29 14:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2309 KB; ProcessInfo: 1029 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 307 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 51 KB; rules::ProcessConditionsCache: 50 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11874 KB; 2026-03-29 14:02:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 13:55:29, To:, 2026-03-29 14:02:30, Duration (s):, 421, Events Per Second:, 1.023, Events:, 431, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 424, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53325 2026-03-29 14:02:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s655ms. 2026-03-29 14:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2309 KB; ProcessInfo: 932 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11683 KB; 2026-03-29 14:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2309 KB; ProcessInfo: 932 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11642 KB; 2026-03-29 14:04:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:04:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 14:04:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:04:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2723 KB; ModuleMetadata: 2309 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11614 KB; 2026-03-29 14:05:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 14:05:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 14:05:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 14:05:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 14:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2309 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11596 KB; 2026-03-29 14:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2309 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11617 KB; 2026-03-29 14:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2309 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11621 KB; 2026-03-29 14:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2309 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11632 KB; 2026-03-29 14:09:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 14:02:23, To:, 2026-03-29 14:09:30, Duration (s):, 427, Events Per Second:, 0.309, Events:, 132, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 131, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17810 2026-03-29 14:09:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s688ms. 2026-03-29 14:09:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:09:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 14:09:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:09:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2735 KB; ModuleMetadata: 2309 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11552 KB; 2026-03-29 14:10:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 14:10:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 14:10:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 14:10:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 14:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 2309 KB; ProcessInfo: 854 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11559 KB; 2026-03-29 14:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2309 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11565 KB; 2026-03-29 14:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2759 KB; ModuleMetadata: 2309 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11589 KB; 2026-03-29 14:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2761 KB; ModuleMetadata: 2309 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11593 KB; 2026-03-29 14:14:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:14:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 14:14:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:14:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2761 KB; ModuleMetadata: 2309 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11592 KB; 2026-03-29 14:15:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 14:15:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 14:15:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 14:15:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 14:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2750 KB; ModuleMetadata: 2309 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11581 KB; 2026-03-29 14:16:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 14:10:09, To:, 2026-03-29 14:16:30, Duration (s):, 381, Events Per Second:, 0.087, Events:, 33, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 32, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6671 2026-03-29 14:16:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s657ms. 2026-03-29 14:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2731 KB; ModuleMetadata: 2309 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11527 KB; 2026-03-29 14:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2732 KB; ModuleMetadata: 2309 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11524 KB; 2026-03-29 14:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2733 KB; ModuleMetadata: 2309 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11526 KB; 2026-03-29 14:19:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:19:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 14:19:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:19:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2734 KB; ModuleMetadata: 2309 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11535 KB; 2026-03-29 14:20:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 14:20:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 14:20:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 14:20:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 14:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2736 KB; ModuleMetadata: 2309 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11539 KB; 2026-03-29 14:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2738 KB; ModuleMetadata: 2309 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11547 KB; 2026-03-29 14:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2740 KB; ModuleMetadata: 2309 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11548 KB; 2026-03-29 14:23:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 14:16:43, To:, 2026-03-29 14:23:30, Duration (s):, 407, Events Per Second:, 0.130, Events:, 53, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 52, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9100 2026-03-29 14:23:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s380ms. 2026-03-29 14:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2309 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11520 KB; 2026-03-29 14:24:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:24:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 14:24:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:24:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2763 KB; ModuleMetadata: 2309 KB; ProcessInfo: 809 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11548 KB; 2026-03-29 14:25:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 14:25:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 14:25:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 14:25:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 14:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2750 KB; ModuleMetadata: 2309 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11538 KB; 2026-03-29 14:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2751 KB; ModuleMetadata: 2309 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11540 KB; 2026-03-29 14:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2752 KB; ModuleMetadata: 2309 KB; ProcessInfo: 810 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11542 KB; 2026-03-29 14:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2755 KB; ModuleMetadata: 2309 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11549 KB; 2026-03-29 14:29:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:29:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 14:29:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:29:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2757 KB; ModuleMetadata: 2310 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11574 KB; 2026-03-29 14:30:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 14:25:00, To:, 2026-03-29 14:30:30, Duration (s):, 330, Events Per Second:, 0.091, Events:, 30, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 29, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6050 2026-03-29 14:30:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s948ms. 2026-03-29 14:30:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 14:30:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 14:30:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 14:30:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 14:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2310 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11543 KB; 2026-03-29 14:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2310 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11546 KB; 2026-03-29 14:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2720 KB; ModuleMetadata: 2310 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 88 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11543 KB; 2026-03-29 14:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2741 KB; ModuleMetadata: 2310 KB; ProcessInfo: 885 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11798 KB; 2026-03-29 14:34:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:34:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 14:34:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:34:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2742 KB; ModuleMetadata: 2310 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 131 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11765 KB; 2026-03-29 14:35:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 14:35:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 14:35:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 14:35:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 14:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2710 KB; ModuleMetadata: 2310 KB; ProcessInfo: 904 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11699 KB; 2026-03-29 14:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2712 KB; ModuleMetadata: 2310 KB; ProcessInfo: 904 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11687 KB; 2026-03-29 14:37:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 14:31:01, To:, 2026-03-29 14:37:30, Duration (s):, 389, Events Per Second:, 0.619, Events:, 241, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 240, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30029 2026-03-29 14:37:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s510ms. 2026-03-29 14:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2713 KB; ModuleMetadata: 2310 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 91 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11572 KB; 2026-03-29 14:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2714 KB; ModuleMetadata: 2310 KB; ProcessInfo: 954 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 126 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11773 KB; 2026-03-29 14:39:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:39:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 14:39:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:39:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2717 KB; ModuleMetadata: 2310 KB; ProcessInfo: 959 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 104 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11763 KB; 2026-03-29 14:40:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 14:40:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 14:40:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 14:40:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 14:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2718 KB; ModuleMetadata: 2310 KB; ProcessInfo: 964 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11775 KB; 2026-03-29 14:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2721 KB; ModuleMetadata: 2310 KB; ProcessInfo: 1010 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11982 KB; 2026-03-29 14:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2719 KB; ModuleMetadata: 2310 KB; ProcessInfo: 1010 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 106 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11845 KB; 2026-03-29 14:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2840 KB; ModuleMetadata: 2310 KB; ProcessInfo: 1034 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 12088 KB; 2026-03-29 14:44:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 14:38:18, To:, 2026-03-29 14:44:30, Duration (s):, 372, Events Per Second:, 1.225, Events:, 456, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 453, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57347 2026-03-29 14:44:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s690ms. 2026-03-29 14:44:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:44:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 14:44:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:44:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2821 KB; ModuleMetadata: 2310 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11769 KB; 2026-03-29 14:45:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 14:45:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 14:45:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 14:45:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 14:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2788 KB; ModuleMetadata: 2310 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11694 KB; 2026-03-29 14:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2791 KB; ModuleMetadata: 2310 KB; ProcessInfo: 879 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11701 KB; 2026-03-29 14:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2753 KB; ModuleMetadata: 2310 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11691 KB; 2026-03-29 14:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2715 KB; ModuleMetadata: 2310 KB; ProcessInfo: 929 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11723 KB; 2026-03-29 14:49:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:49:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 14:49:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:49:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2737 KB; ModuleMetadata: 2310 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11758 KB; 2026-03-29 14:50:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 14:50:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 14:50:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 14:50:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 14:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 2739 KB; ModuleMetadata: 2310 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 11739 KB; 2026-03-29 14:51:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 14:44:29, To:, 2026-03-29 14:51:30, Duration (s):, 421, Events Per Second:, 0.420, Events:, 177, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 174, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25257 2026-03-29 14:51:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s666ms. 2026-03-29 14:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2310 KB; ProcessInfo: 840 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 127 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9493 KB; 2026-03-29 14:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2310 KB; ProcessInfo: 863 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 153 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9567 KB; 2026-03-29 14:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2310 KB; ProcessInfo: 985 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 280 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 158 KB; BaseEvent: 68 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9949 KB; 2026-03-29 14:54:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:54:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 14:54:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:54:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2310 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 285 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 158 KB; BaseEvent: 70 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9977 KB; 2026-03-29 14:55:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 14:55:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 14:55:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 14:55:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 14:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2310 KB; ProcessInfo: 1014 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 282 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 158 KB; BaseEvent: 75 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9964 KB; 2026-03-29 14:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2310 KB; ProcessInfo: 1031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 318 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 158 KB; BaseEvent: 77 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9986 KB; 2026-03-29 14:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2310 KB; ProcessInfo: 1041 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 300 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 158 KB; BaseEvent: 81 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9990 KB; 2026-03-29 14:58:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 14:52:04, To:, 2026-03-29 14:58:30, Duration (s):, 386, Events Per Second:, 1.476, Events:, 570, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 500, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 67, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 69585 2026-03-29 14:58:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s547ms. 2026-03-29 14:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2310 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 347 KB; CacheEntry: 334 KB; TcpIpConnectionsManager: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9842 KB; 2026-03-29 14:59:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:59:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 14:59:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 14:59:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 906 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 294 KB; TcpIpConnectionsManager: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9805 KB; 2026-03-29 15:00:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 15:00:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 15:00:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 15:00:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 15:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9948 KB; 2026-03-29 15:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9915 KB; 2026-03-29 15:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9899 KB; 2026-03-29 15:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 991 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9906 KB; 2026-03-29 15:04:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:04:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 15:04:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:04:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 994 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 341 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9914 KB; 2026-03-29 15:05:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 14:58:23, To:, 2026-03-29 15:05:30, Duration (s):, 427, Events Per Second:, 0.887, Events:, 379, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 378, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 50115 2026-03-29 15:05:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s270ms. 2026-03-29 15:05:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 15:05:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 15:05:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 15:05:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 15:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 342 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9699 KB; 2026-03-29 15:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 342 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9702 KB; 2026-03-29 15:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 835 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 346 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9719 KB; 2026-03-29 15:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 408 KB; ModuleInfoCache: 405 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 58 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9972 KB; 2026-03-29 15:09:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:09:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 15:09:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:09:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 58 KB; rules::ProcessConditionsCache: 52 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9657 KB; 2026-03-29 15:10:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 15:10:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 15:10:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 15:10:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 15:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 58 KB; rules::ProcessConditionsCache: 39 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9646 KB; 2026-03-29 15:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 158 KB; ProcessInfoCommandLineTag: 58 KB; rules::ProcessConditionsCache: 39 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9621 KB; 2026-03-29 15:12:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 15:05:29, To:, 2026-03-29 15:12:30, Duration (s):, 421, Events Per Second:, 0.966, Events:, 407, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 50906 2026-03-29 15:12:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s823ms. 2026-03-29 15:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 405 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 95 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9519 KB; 2026-03-29 15:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2312 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 405 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9586 KB; 2026-03-29 15:14:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:14:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 15:14:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:14:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9548 KB; 2026-03-29 15:15:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 15:15:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 15:15:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 15:15:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 15:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9541 KB; 2026-03-29 15:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 906 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 47 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9528 KB; 2026-03-29 15:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 691 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 47 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9618 KB; 2026-03-29 15:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 975 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 772 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9885 KB; 2026-03-29 15:19:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 15:13:03, To:, 2026-03-29 15:19:30, Duration (s):, 387, Events Per Second:, 0.816, Events:, 316, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 315, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39874 2026-03-29 15:19:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s685ms. 2026-03-29 15:19:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:19:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 15:19:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:19:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9536 KB; 2026-03-29 15:20:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 15:20:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 15:20:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 15:20:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 15:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9524 KB; 2026-03-29 15:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9501 KB; 2026-03-29 15:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9482 KB; 2026-03-29 15:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9483 KB; 2026-03-29 15:24:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:24:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 15:24:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:24:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9496 KB; 2026-03-29 15:25:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 15:25:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 15:25:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 15:25:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 15:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9517 KB; 2026-03-29 15:26:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 15:19:29, To:, 2026-03-29 15:26:30, Duration (s):, 421, Events Per Second:, 0.159, Events:, 67, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 66, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12774 2026-03-29 15:26:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s487ms. 2026-03-29 15:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 835 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9482 KB; 2026-03-29 15:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 835 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9461 KB; 2026-03-29 15:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2317 KB; ProcessInfo: 835 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9463 KB; 2026-03-29 15:29:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:29:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 15:29:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:29:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 843 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9473 KB; 2026-03-29 15:30:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 15:30:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 15:30:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 15:30:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 15:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 856 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9506 KB; 2026-03-29 15:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 856 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9478 KB; 2026-03-29 15:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 856 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9483 KB; 2026-03-29 15:33:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 15:26:36, To:, 2026-03-29 15:33:30, Duration (s):, 414, Events Per Second:, 0.290, Events:, 120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 119, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17031 2026-03-29 15:33:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s663ms. 2026-03-29 15:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 818 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9426 KB; 2026-03-29 15:34:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:34:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 15:34:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:34:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 821 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9424 KB; 2026-03-29 15:35:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 15:35:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 15:35:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 15:35:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 15:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 844 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9478 KB; 2026-03-29 15:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 848 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9472 KB; 2026-03-29 15:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 848 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9472 KB; 2026-03-29 15:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 614 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 156 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9754 KB; 2026-03-29 15:39:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:39:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 15:39:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:39:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 1064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 715 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 263 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; cloudutils::CloudData: 160 KB; BaseEvent: 101 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10155 KB; 2026-03-29 15:40:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 15:34:09, To:, 2026-03-29 15:40:30, Duration (s):, 381, Events Per Second:, 1.765, Events:, 673, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 592, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 80, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 78968 2026-03-29 15:40:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s580ms. 2026-03-29 15:40:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 15:40:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 15:40:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 15:40:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 15:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 1035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 269 KB; rules::ProcessConditionsCache: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9931 KB; 2026-03-29 15:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 1035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 265 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9907 KB; 2026-03-29 15:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 1082 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 390 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10119 KB; 2026-03-29 15:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 1082 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 265 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9936 KB; 2026-03-29 15:44:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:44:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 15:44:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:44:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 1085 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 267 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9954 KB; 2026-03-29 15:45:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 15:45:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 15:45:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 15:45:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 15:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 1107 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 267 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9987 KB; 2026-03-29 15:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 1130 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 276 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10013 KB; 2026-03-29 15:47:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 15:40:34, To:, 2026-03-29 15:47:30, Duration (s):, 416, Events Per Second:, 0.730, Events:, 304, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 303, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37335 2026-03-29 15:47:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s823ms. 2026-03-29 15:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 851 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 267 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9675 KB; 2026-03-29 15:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 308 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9813 KB; 2026-03-29 15:49:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:49:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 15:49:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:49:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 615 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 293 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9842 KB; 2026-03-29 15:50:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 15:50:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 15:50:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 15:50:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 15:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 714 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 274 KB; rules::ProcessConditionsCache: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9944 KB; 2026-03-29 15:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 715 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 273 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9972 KB; 2026-03-29 15:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 271 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9938 KB; 2026-03-29 15:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9924 KB; 2026-03-29 15:54:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 15:47:37, To:, 2026-03-29 15:54:30, Duration (s):, 413, Events Per Second:, 0.731, Events:, 302, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 301, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37009 2026-03-29 15:54:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s668ms. 2026-03-29 15:54:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:54:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 15:54:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:54:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9718 KB; 2026-03-29 15:55:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 15:55:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 15:55:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 15:55:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 15:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 707 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9710 KB; 2026-03-29 15:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 708 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9710 KB; 2026-03-29 15:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9713 KB; 2026-03-29 15:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9677 KB; 2026-03-29 15:59:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:59:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 15:59:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 15:59:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9701 KB; 2026-03-29 16:00:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 16:00:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 16:00:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 16:00:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 16:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9704 KB; 2026-03-29 16:01:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 15:55:00, To:, 2026-03-29 16:01:30, Duration (s):, 390, Events Per Second:, 0.261, Events:, 102, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 101, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15498 2026-03-29 16:01:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s680ms. 2026-03-29 16:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 840 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9653 KB; 2026-03-29 16:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 841 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9658 KB; 2026-03-29 16:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 841 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9655 KB; 2026-03-29 16:04:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:04:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 16:04:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:04:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 846 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9685 KB; 2026-03-29 16:05:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 16:05:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 16:05:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 16:05:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 16:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 847 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9676 KB; 2026-03-29 16:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 847 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9675 KB; 2026-03-29 16:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 850 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9693 KB; 2026-03-29 16:08:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 16:02:04, To:, 2026-03-29 16:08:30, Duration (s):, 386, Events Per Second:, 0.080, Events:, 31, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 30, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6497 2026-03-29 16:08:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s738ms. 2026-03-29 16:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9644 KB; 2026-03-29 16:09:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:09:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 16:09:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:09:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9644 KB; 2026-03-29 16:10:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 16:10:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 16:10:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 16:10:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 16:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9644 KB; 2026-03-29 16:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9644 KB; 2026-03-29 16:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 821 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9677 KB; 2026-03-29 16:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 909 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 336 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9830 KB; 2026-03-29 16:14:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:14:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 16:14:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:14:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9828 KB; 2026-03-29 16:15:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 16:08:15, To:, 2026-03-29 16:15:30, Duration (s):, 435, Events Per Second:, 0.609, Events:, 265, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 264, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34990 2026-03-29 16:15:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s798ms. 2026-03-29 16:15:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 16:15:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 16:15:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 16:15:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 16:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 331 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9848 KB; 2026-03-29 16:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9833 KB; 2026-03-29 16:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9827 KB; 2026-03-29 16:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 329 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9809 KB; 2026-03-29 16:19:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:19:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 16:19:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:19:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 336 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9825 KB; 2026-03-29 16:20:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 16:20:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 16:20:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 16:20:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 16:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 336 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9827 KB; 2026-03-29 16:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 336 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9831 KB; 2026-03-29 16:22:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 16:15:35, To:, 2026-03-29 16:22:30, Duration (s):, 415, Events Per Second:, 0.219, Events:, 91, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 90, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13231 2026-03-29 16:22:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s229ms. 2026-03-29 16:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 812 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 336 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9679 KB; 2026-03-29 16:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 813 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9691 KB; 2026-03-29 16:24:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:24:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 16:24:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:24:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 816 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 338 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9692 KB; 2026-03-29 16:25:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 16:25:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 16:25:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 16:25:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 16:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 840 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9758 KB; 2026-03-29 16:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 840 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 806 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 368 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9947 KB; 2026-03-29 16:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 840 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 808 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 368 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9950 KB; 2026-03-29 16:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 843 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 769 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 368 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9891 KB; 2026-03-29 16:29:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 16:23:43, To:, 2026-03-29 16:29:30, Duration (s):, 347, Events Per Second:, 0.671, Events:, 233, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 88, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 72, Livegrid:, 72, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25531 2026-03-29 16:29:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s986ms. 2026-03-29 16:29:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:29:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 16:29:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:29:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 819 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 768 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 376 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9882 KB; 2026-03-29 16:30:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 16:30:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 16:30:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 16:30:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 16:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 378 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9786 KB; 2026-03-29 16:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 427 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9887 KB; 2026-03-29 16:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9556 KB; 2026-03-29 16:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9726 KB; 2026-03-29 16:34:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:34:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 16:34:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:34:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 294 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 70 KB; BaseEvent: 65 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9746 KB; 2026-03-29 16:35:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 16:35:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 16:35:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 16:35:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 16:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; BaseEvent: 68 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9695 KB; 2026-03-29 16:36:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 16:30:01, To:, 2026-03-29 16:36:30, Duration (s):, 389, Events Per Second:, 1.307, Events:, 509, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 400, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 48, Livegrid:, 48, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57461 2026-03-29 16:36:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s828ms. 2026-03-29 16:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9498 KB; 2026-03-29 16:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9479 KB; 2026-03-29 16:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9487 KB; 2026-03-29 16:39:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:39:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 16:39:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:39:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9593 KB; 2026-03-29 16:40:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 16:40:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 16:40:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 16:40:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 16:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9615 KB; 2026-03-29 16:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9617 KB; 2026-03-29 16:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9624 KB; 2026-03-29 16:43:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 16:39:00, To:, 2026-03-29 16:43:30, Duration (s):, 270, Events Per Second:, 0.936, Events:, 253, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 134, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 59, Livegrid:, 59, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28368 2026-03-29 16:43:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s212ms. 2026-03-29 16:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9428 KB; 2026-03-29 16:44:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:44:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 16:44:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:44:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 812 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9434 KB; 2026-03-29 16:45:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 16:45:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 16:45:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 16:45:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 16:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 101 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9520 KB; 2026-03-29 16:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9702 KB; 2026-03-29 16:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 310 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 126 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9722 KB; 2026-03-29 16:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9654 KB; 2026-03-29 16:49:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:49:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 16:49:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:49:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 767 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 86 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9782 KB; 2026-03-29 16:50:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 16:43:41, To:, 2026-03-29 16:50:30, Duration (s):, 409, Events Per Second:, 0.816, Events:, 334, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 333, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40638 2026-03-29 16:50:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s598ms. 2026-03-29 16:50:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 16:50:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 16:50:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 16:50:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 16:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 879 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 770 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 223 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9756 KB; 2026-03-29 16:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9561 KB; 2026-03-29 16:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9701 KB; 2026-03-29 16:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 793 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9704 KB; 2026-03-29 16:54:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:54:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 16:54:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:54:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 1004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 735 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 160 KB; BaseEvent: 51 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10000 KB; 2026-03-29 16:55:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 16:55:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 16:55:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 16:55:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 16:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 1006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 160 KB; BaseEvent: 55 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9843 KB; 2026-03-29 16:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 1006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 160 KB; BaseEvent: 56 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9850 KB; 2026-03-29 16:57:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 16:51:13, To:, 2026-03-29 16:57:30, Duration (s):, 377, Events Per Second:, 1.081, Events:, 408, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 371, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49518 2026-03-29 16:57:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s141ms. 2026-03-29 16:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 210 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9643 KB; 2026-03-29 16:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2318 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 182 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9620 KB; 2026-03-29 16:59:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:59:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 16:59:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 16:59:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 183 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9672 KB; 2026-03-29 17:00:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 17:00:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 17:00:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 17:00:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 17:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; rules::ProcessConditionsCache: 183 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9675 KB; 2026-03-29 17:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 183 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9677 KB; 2026-03-29 17:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 948 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 186 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9674 KB; 2026-03-29 17:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 216 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9733 KB; 2026-03-29 17:04:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 16:59:27, To:, 2026-03-29 17:04:30, Duration (s):, 303, Events Per Second:, 0.442, Events:, 134, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 127, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19231 2026-03-29 17:04:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s232ms. 2026-03-29 17:04:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:04:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 17:04:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:04:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 843 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 216 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9577 KB; 2026-03-29 17:05:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 17:05:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 17:05:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 17:05:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 17:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 843 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9557 KB; 2026-03-29 17:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 843 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 183 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9532 KB; 2026-03-29 17:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 890 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; rules::ProcessConditionsCache: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9762 KB; 2026-03-29 17:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9714 KB; 2026-03-29 17:09:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:09:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 17:09:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:09:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 611 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9732 KB; 2026-03-29 17:10:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 17:10:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 17:10:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 17:10:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 17:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 614 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; TcpIpConnectionsManager: 259 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9870 KB; 2026-03-29 17:11:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 17:05:00, To:, 2026-03-29 17:11:30, Duration (s):, 390, Events Per Second:, 0.845, Events:, 330, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 329, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42926 2026-03-29 17:11:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s119ms. 2026-03-29 17:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 216 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9673 KB; 2026-03-29 17:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 615 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 215 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9677 KB; 2026-03-29 17:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9673 KB; 2026-03-29 17:14:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:14:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 17:14:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:14:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9681 KB; 2026-03-29 17:15:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 17:15:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 17:15:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 17:15:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 17:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9672 KB; 2026-03-29 17:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9736 KB; 2026-03-29 17:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9711 KB; 2026-03-29 17:18:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 17:11:29, To:, 2026-03-29 17:18:30, Duration (s):, 421, Events Per Second:, 0.247, Events:, 104, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 101, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16256 2026-03-29 17:18:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s668ms. 2026-03-29 17:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 841 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 218 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9616 KB; 2026-03-29 17:19:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:19:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 17:19:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:19:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 841 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 611 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 203 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9574 KB; 2026-03-29 17:20:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 17:20:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 17:20:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 17:20:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 17:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 280 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9772 KB; 2026-03-29 17:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9687 KB; 2026-03-29 17:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 615 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9738 KB; 2026-03-29 17:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 948 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 271 KB; rules::ProcessConditionsCache: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9812 KB; 2026-03-29 17:24:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:24:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 17:24:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:24:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9799 KB; 2026-03-29 17:25:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 17:19:04, To:, 2026-03-29 17:25:30, Duration (s):, 386, Events Per Second:, 0.880, Events:, 340, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 339, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41455 2026-03-29 17:25:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s662ms. 2026-03-29 17:25:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 17:25:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 17:25:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 17:25:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 17:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 869 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9629 KB; 2026-03-29 17:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 223 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9663 KB; 2026-03-29 17:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 217 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9653 KB; 2026-03-29 17:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 261 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9754 KB; 2026-03-29 17:29:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:29:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 17:29:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:29:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9705 KB; 2026-03-29 17:30:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 17:30:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 17:30:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 17:30:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 17:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9704 KB; 2026-03-29 17:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 614 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9703 KB; 2026-03-29 17:32:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 17:25:46, To:, 2026-03-29 17:32:30, Duration (s):, 404, Events Per Second:, 0.373, Events:, 151, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 150, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20790 2026-03-29 17:32:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s745ms. 2026-03-29 17:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 835 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 615 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9609 KB; 2026-03-29 17:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 835 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9591 KB; 2026-03-29 17:34:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:34:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 17:34:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:34:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 854 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9654 KB; 2026-03-29 17:35:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 17:35:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 17:35:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 17:35:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 17:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 906 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 291 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9809 KB; 2026-03-29 17:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 906 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 257 KB; rules::ProcessConditionsCache: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9797 KB; 2026-03-29 17:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 747 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 246 KB; rules::ProcessConditionsCache: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9870 KB; 2026-03-29 17:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 749 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9914 KB; 2026-03-29 17:39:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 17:33:10, To:, 2026-03-29 17:39:30, Duration (s):, 380, Events Per Second:, 0.912, Events:, 347, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 346, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42765 2026-03-29 17:39:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s804ms. 2026-03-29 17:39:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:39:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 17:39:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:39:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 991 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 729 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 404 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10170 KB; 2026-03-29 17:40:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 17:40:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 17:40:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 17:40:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 17:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 1003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 342 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10053 KB; 2026-03-29 17:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 1004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10055 KB; 2026-03-29 17:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 1004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10041 KB; 2026-03-29 17:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2320 KB; ProcessInfo: 1004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; BaseEvent: 57 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10011 KB; 2026-03-29 17:44:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:44:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 17:44:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:44:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 1011 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 345 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 160 KB; BaseEvent: 58 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10005 KB; 2026-03-29 17:45:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 17:45:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 17:45:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 17:45:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 17:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 1011 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 342 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 160 KB; BaseEvent: 59 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9995 KB; 2026-03-29 17:46:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 17:39:49, To:, 2026-03-29 17:46:30, Duration (s):, 401, Events Per Second:, 0.964, Events:, 387, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 343, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 43, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47206 2026-03-29 17:46:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s473ms. 2026-03-29 17:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9694 KB; 2026-03-29 17:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9691 KB; 2026-03-29 17:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9693 KB; 2026-03-29 17:49:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:49:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 17:49:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:49:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 822 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9706 KB; 2026-03-29 17:50:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 17:50:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 17:50:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 17:50:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 17:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 825 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9718 KB; 2026-03-29 17:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 835 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 354 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9842 KB; 2026-03-29 17:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 835 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9896 KB; 2026-03-29 17:53:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 17:46:45, To:, 2026-03-29 17:53:30, Duration (s):, 405, Events Per Second:, 0.148, Events:, 60, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 59, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9226 2026-03-29 17:53:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s522ms. 2026-03-29 17:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 819 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 783 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 353 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9879 KB; 2026-03-29 17:54:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:54:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 17:54:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:54:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 846 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 357 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9763 KB; 2026-03-29 17:55:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 17:55:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 17:55:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 17:55:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 17:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 869 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 357 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9784 KB; 2026-03-29 17:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 869 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 355 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9784 KB; 2026-03-29 17:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 869 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 355 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9805 KB; 2026-03-29 17:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2321 KB; ProcessInfo: 869 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 758 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 406 KB; rules::ProcessConditionsCache: 355 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9900 KB; 2026-03-29 17:59:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:59:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 17:59:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 17:59:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; rules::ProcessConditionsCache: 368 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9938 KB; 2026-03-29 18:00:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 17:53:33, To:, 2026-03-29 18:00:30, Duration (s):, 417, Events Per Second:, 0.398, Events:, 166, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 165, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22994 2026-03-29 18:00:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s139ms. 2026-03-29 18:00:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 18:00:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 18:00:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 18:00:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 18:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 421 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 162 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9918 KB; 2026-03-29 18:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 418 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 162 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9902 KB; 2026-03-29 18:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 421 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 162 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9920 KB; 2026-03-29 18:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 418 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 162 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9908 KB; 2026-03-29 18:04:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:04:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 18:04:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:04:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 162 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; rules::ProcessConditionsCache: 17 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9531 KB; 2026-03-29 18:05:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 18:05:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 18:05:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 18:05:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 18:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 162 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9614 KB; 2026-03-29 18:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 162 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 33 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9561 KB; 2026-03-29 18:07:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 18:00:38, To:, 2026-03-29 18:07:30, Duration (s):, 412, Events Per Second:, 0.805, Events:, 332, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 329, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41918 2026-03-29 18:07:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s757ms. 2026-03-29 18:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 162 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9480 KB; 2026-03-29 18:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 162 KB; ProcessInfoCommandLineTag: 52 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9513 KB; 2026-03-29 18:09:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:09:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 18:09:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:09:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 162 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9579 KB; 2026-03-29 18:10:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 18:10:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 18:10:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 18:10:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 18:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 162 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9559 KB; 2026-03-29 18:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 162 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9569 KB; 2026-03-29 18:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 162 KB; ProcessInfoCommandLineTag: 52 KB; rules::ProcessConditionsCache: 49 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9557 KB; 2026-03-29 18:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 162 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9640 KB; 2026-03-29 18:14:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 18:07:41, To:, 2026-03-29 18:14:30, Duration (s):, 409, Events Per Second:, 0.826, Events:, 338, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 337, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42477 2026-03-29 18:14:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s872ms. 2026-03-29 18:14:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:14:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 18:14:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:14:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 843 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 611 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 162 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9440 KB; 2026-03-29 18:15:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 18:15:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 18:15:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 18:15:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 18:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 848 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 162 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9451 KB; 2026-03-29 18:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 851 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 162 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9429 KB; 2026-03-29 18:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 851 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 162 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9418 KB; 2026-03-29 18:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 851 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9444 KB; 2026-03-29 18:19:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:19:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 18:19:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:19:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9475 KB; 2026-03-29 18:20:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 18:20:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 18:20:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 18:20:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 18:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9480 KB; 2026-03-29 18:21:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 18:14:30, To:, 2026-03-29 18:21:30, Duration (s):, 420, Events Per Second:, 0.136, Events:, 57, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 52, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10272 2026-03-29 18:21:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s574ms. 2026-03-29 18:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 816 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9431 KB; 2026-03-29 18:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 821 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9422 KB; 2026-03-29 18:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 844 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 94 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9484 KB; 2026-03-29 18:24:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:24:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 18:24:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:24:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 846 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9461 KB; 2026-03-29 18:25:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 18:25:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 18:25:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 18:25:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 18:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 847 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9448 KB; 2026-03-29 18:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 847 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9442 KB; 2026-03-29 18:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 848 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9438 KB; 2026-03-29 18:28:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 18:21:40, To:, 2026-03-29 18:28:30, Duration (s):, 410, Events Per Second:, 0.219, Events:, 90, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 89, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13213 2026-03-29 18:28:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s684ms. 2026-03-29 18:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 834 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9477 KB; 2026-03-29 18:29:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:29:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 18:29:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:29:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 875 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9595 KB; 2026-03-29 18:30:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 18:30:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 18:30:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 18:30:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 18:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 890 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 101 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9608 KB; 2026-03-29 18:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 106 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9625 KB; 2026-03-29 18:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9614 KB; 2026-03-29 18:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9607 KB; 2026-03-29 18:34:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:34:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 18:34:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:34:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 611 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 108 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9631 KB; 2026-03-29 18:35:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 18:28:45, To:, 2026-03-29 18:35:30, Duration (s):, 405, Events Per Second:, 0.666, Events:, 270, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 269, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34731 2026-03-29 18:35:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s668ms. 2026-03-29 18:35:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 18:35:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 18:35:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 18:35:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 18:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 835 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9440 KB; 2026-03-29 18:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 82 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9487 KB; 2026-03-29 18:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9479 KB; 2026-03-29 18:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 701 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 214 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 88 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9706 KB; 2026-03-29 18:39:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:39:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 18:39:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:39:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 981 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 706 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 154 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9883 KB; 2026-03-29 18:40:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 18:40:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 18:40:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 18:40:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 18:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 981 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9732 KB; 2026-03-29 18:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 1006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 117 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9790 KB; 2026-03-29 18:42:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 18:35:30, To:, 2026-03-29 18:42:30, Duration (s):, 420, Events Per Second:, 1.418, Events:, 596, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 563, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 32, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 72669 2026-03-29 18:42:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s819ms. 2026-03-29 18:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9761 KB; 2026-03-29 18:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9737 KB; 2026-03-29 18:44:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:44:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 18:44:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:44:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 213 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9732 KB; 2026-03-29 18:45:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 18:45:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 18:45:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 18:45:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 18:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 190 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9698 KB; 2026-03-29 18:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 995 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9763 KB; 2026-03-29 18:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 1011 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 241 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9866 KB; 2026-03-29 18:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 1019 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 244 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9902 KB; 2026-03-29 18:49:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 18:42:34, To:, 2026-03-29 18:49:30, Duration (s):, 416, Events Per Second:, 0.509, Events:, 212, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 201, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 10, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28880 2026-03-29 18:49:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s671ms. 2026-03-29 18:49:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:49:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 18:49:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:49:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2323 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 407 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 266 KB; rules::ProcessConditionsCache: 247 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9718 KB; 2026-03-29 18:50:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 18:50:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 18:50:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 18:50:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 18:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 296 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 272 KB; TcpIpConnectionsManager: 243 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9839 KB; 2026-03-29 18:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; rules::ProcessConditionsCache: 241 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9771 KB; 2026-03-29 18:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 614 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 276 KB; rules::ProcessConditionsCache: 249 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9808 KB; 2026-03-29 18:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 713 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 282 KB; rules::ProcessConditionsCache: 245 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9909 KB; 2026-03-29 18:54:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:54:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 18:54:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:54:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9734 KB; 2026-03-29 18:55:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 18:55:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 18:55:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 18:55:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 18:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 207 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9725 KB; 2026-03-29 18:56:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 18:49:29, To:, 2026-03-29 18:56:30, Duration (s):, 421, Events Per Second:, 0.389, Events:, 164, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 153, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23892 2026-03-29 18:56:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s658ms. 2026-03-29 18:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 831 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 202 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9607 KB; 2026-03-29 18:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 832 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; rules::ProcessConditionsCache: 198 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9577 KB; 2026-03-29 18:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 832 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; rules::ProcessConditionsCache: 196 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9576 KB; 2026-03-29 18:59:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:59:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 174, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 18:59:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 18:59:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 846 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 777 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 209 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9767 KB; 2026-03-29 19:01:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 19:01:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 19:01:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 19:01:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 19:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 846 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 822 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 211 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9814 KB; 2026-03-29 19:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 847 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 782 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; rules::ProcessConditionsCache: 212 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9772 KB; 2026-03-29 19:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 850 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; rules::ProcessConditionsCache: 214 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9718 KB; 2026-03-29 19:03:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 18:57:30, To:, 2026-03-29 19:03:30, Duration (s):, 360, Events Per Second:, 0.122, Events:, 44, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 43, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8248 2026-03-29 19:03:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s663ms. 2026-03-29 19:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 826 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 237 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9732 KB; 2026-03-29 19:04:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:04:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 19:04:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:true, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:04:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 828 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 686 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; rules::ProcessConditionsCache: 215 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9666 KB; 2026-03-29 19:06:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 19:06:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 19:06:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 19:06:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 19:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 882 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 312 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9872 KB; 2026-03-29 19:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 882 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 596 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 253 KB; rules::ProcessConditionsCache: 217 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9689 KB; 2026-03-29 19:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 271 KB; rules::ProcessConditionsCache: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9760 KB; 2026-03-29 19:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 272 KB; rules::ProcessConditionsCache: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9787 KB; 2026-03-29 19:09:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:09:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 19:09:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:09:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 277 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9939 KB; 2026-03-29 19:10:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 19:03:36, To:, 2026-03-29 19:10:30, Duration (s):, 414, Events Per Second:, 1.201, Events:, 498, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 497, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 61145 2026-03-29 19:10:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s647ms. 2026-03-29 19:11:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 19:11:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 19:11:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 19:11:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 19:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 239 KB; rules::ProcessConditionsCache: 229 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9734 KB; 2026-03-29 19:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9710 KB; 2026-03-29 19:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9713 KB; 2026-03-29 19:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 227 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9698 KB; 2026-03-29 19:14:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:14:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 19:14:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:14:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 229 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9703 KB; 2026-03-29 19:16:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 19:16:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 19:16:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 19:16:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 19:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9697 KB; 2026-03-29 19:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 944 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 596 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9706 KB; 2026-03-29 19:17:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 19:10:30, To:, 2026-03-29 19:17:30, Duration (s):, 420, Events Per Second:, 0.133, Events:, 56, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 51, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10767 2026-03-29 19:17:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s935ms. 2026-03-29 19:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 816 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9564 KB; 2026-03-29 19:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9839 KB; 2026-03-29 19:19:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:19:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 19:19:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:19:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 868 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 241 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9680 KB; 2026-03-29 19:21:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 19:21:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 19:21:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 19:21:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 19:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 870 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 239 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9689 KB; 2026-03-29 19:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 272 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9775 KB; 2026-03-29 19:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9709 KB; 2026-03-29 19:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9709 KB; 2026-03-29 19:24:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 19:18:55, To:, 2026-03-29 19:24:30, Duration (s):, 335, Events Per Second:, 0.674, Events:, 226, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 217, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28229 2026-03-29 19:24:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s114ms. 2026-03-29 19:24:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:24:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 19:24:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:24:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 837 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 242 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9605 KB; 2026-03-29 19:26:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 19:26:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 19:26:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 19:26:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 19:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 838 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 594 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 242 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9581 KB; 2026-03-29 19:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 596 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9638 KB; 2026-03-29 19:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 242 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9638 KB; 2026-03-29 19:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 863 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 242 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9643 KB; 2026-03-29 19:29:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:29:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 19:29:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:29:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9696 KB; 2026-03-29 19:31:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 19:31:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 19:31:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 19:31:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 19:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9729 KB; 2026-03-29 19:31:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 19:25:01, To:, 2026-03-29 19:31:30, Duration (s):, 389, Events Per Second:, 0.393, Events:, 153, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 152, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21512 2026-03-29 19:31:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s664ms. 2026-03-29 19:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 848 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 252 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9642 KB; 2026-03-29 19:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 349 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9862 KB; 2026-03-29 19:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 296 KB; TcpIpConnectionsManager: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9845 KB; 2026-03-29 19:34:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:34:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 19:34:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:34:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 259 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9793 KB; 2026-03-29 19:36:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 19:36:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 19:36:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 19:36:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 19:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 322 KB; TcpIpConnectionsManager: 295 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9953 KB; 2026-03-29 19:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 594 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 257 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9841 KB; 2026-03-29 19:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 997 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 596 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 285 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9927 KB; 2026-03-29 19:38:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 19:31:24, To:, 2026-03-29 19:38:30, Duration (s):, 426, Events Per Second:, 0.994, Events:, 424, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 423, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51609 2026-03-29 19:38:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s828ms. 2026-03-29 19:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 284 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9869 KB; 2026-03-29 19:39:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:39:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 19:39:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:39:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 981 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 297 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 59 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9909 KB; 2026-03-29 19:41:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 19:41:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 19:41:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 19:41:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 19:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 277 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 60 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9929 KB; 2026-03-29 19:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 994 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 268 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 59 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9911 KB; 2026-03-29 19:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1020 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 288 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 59 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9950 KB; 2026-03-29 19:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1020 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 59 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9969 KB; 2026-03-29 19:44:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:44:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 19:44:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:44:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1023 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 60 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9965 KB; 2026-03-29 19:45:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 19:38:30, To:, 2026-03-29 19:45:30, Duration (s):, 420, Events Per Second:, 0.911, Events:, 383, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 371, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49384 2026-03-29 19:45:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s518ms. 2026-03-29 19:46:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 19:46:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 19:46:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 19:46:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 19:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 838 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9674 KB; 2026-03-29 19:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 850 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 615 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9685 KB; 2026-03-29 19:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 870 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9729 KB; 2026-03-29 19:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 364 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9875 KB; 2026-03-29 19:49:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:49:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 19:49:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:49:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 300 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9828 KB; 2026-03-29 19:51:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 19:51:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 19:51:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 19:51:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 19:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 300 KB; TcpIpConnectionsManager: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9842 KB; 2026-03-29 19:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 300 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9826 KB; 2026-03-29 19:52:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 19:46:34, To:, 2026-03-29 19:52:30, Duration (s):, 356, Events Per Second:, 0.651, Events:, 232, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 231, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28842 2026-03-29 19:52:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s724ms. 2026-03-29 19:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9524 KB; 2026-03-29 19:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9541 KB; 2026-03-29 19:54:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:54:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 19:54:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:54:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 906 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9531 KB; 2026-03-29 19:56:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 19:56:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 19:56:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 19:56:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 19:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9772 KB; 2026-03-29 19:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 37 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9631 KB; 2026-03-29 19:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9681 KB; 2026-03-29 19:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 981 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 39 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9671 KB; 2026-03-29 19:59:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 19:53:01, To:, 2026-03-29 19:59:30, Duration (s):, 389, Events Per Second:, 0.927, Events:, 361, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 360, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43886 2026-03-29 19:59:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s693ms. 2026-03-29 19:59:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:59:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 19:59:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 19:59:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 869 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 699 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9596 KB; 2026-03-29 20:01:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 20:01:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 20:01:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 20:01:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 20:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 870 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 702 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9609 KB; 2026-03-29 20:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 872 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9573 KB; 2026-03-29 20:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 259 KB; TcpIpConnectionsManager: 223 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 126 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9696 KB; 2026-03-29 20:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 708 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 108 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9730 KB; 2026-03-29 20:04:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:04:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 20:04:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:04:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 711 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 273 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 106 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9752 KB; 2026-03-29 20:06:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 20:06:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 20:06:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 20:06:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 20:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 282 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9747 KB; 2026-03-29 20:06:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 19:59:35, To:, 2026-03-29 20:06:30, Duration (s):, 415, Events Per Second:, 0.356, Events:, 148, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 147, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22242 2026-03-29 20:06:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s706ms. 2026-03-29 20:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 848 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9586 KB; 2026-03-29 20:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9598 KB; 2026-03-29 20:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9602 KB; 2026-03-29 20:09:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:09:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 20:09:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:09:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9586 KB; 2026-03-29 20:11:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 20:11:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 20:11:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 20:11:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 20:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9584 KB; 2026-03-29 20:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9584 KB; 2026-03-29 20:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 866 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 267 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9634 KB; 2026-03-29 20:13:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 20:06:30, To:, 2026-03-29 20:08:43, Duration (s):, 133, Events Per Second:, 0.992, Events:, 132, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 61, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 35, Livegrid:, 35, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17222 2026-03-29 20:13:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s680ms. 2026-03-29 20:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 88 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9599 KB; 2026-03-29 20:14:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:14:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 20:14:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:14:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9610 KB; 2026-03-29 20:16:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 20:16:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 20:16:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 20:16:03 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 20:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9652 KB; 2026-03-29 20:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9619 KB; 2026-03-29 20:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9620 KB; 2026-03-29 20:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 58 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9603 KB; 2026-03-29 20:19:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:19:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 20:19:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:19:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 944 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 58 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9616 KB; 2026-03-29 20:20:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 20:08:44, To:, 2026-03-29 20:20:30, Duration (s):, 706, Events Per Second:, 0.437, Events:, 309, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 308, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41664 2026-03-29 20:20:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s689ms. 2026-03-29 20:21:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 20:21:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 20:21:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 20:21:03 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 20:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 826 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9438 KB; 2026-03-29 20:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 826 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9443 KB; 2026-03-29 20:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 828 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9454 KB; 2026-03-29 20:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 828 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 234 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9459 KB; 2026-03-29 20:24:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:24:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 20:24:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:24:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 831 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9466 KB; 2026-03-29 20:26:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 20:26:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 20:26:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 20:26:03 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 20:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 831 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9452 KB; 2026-03-29 20:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 831 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9454 KB; 2026-03-29 20:27:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 20:22:49, To:, 2026-03-29 20:27:30, Duration (s):, 281, Events Per Second:, 0.043, Events:, 12, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 11, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 3534 2026-03-29 20:27:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s081ms. 2026-03-29 20:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 821 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9454 KB; 2026-03-29 20:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 821 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9457 KB; 2026-03-29 20:29:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:29:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 20:29:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:29:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 823 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9458 KB; 2026-03-29 20:31:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 20:31:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 20:31:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 20:31:03 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 20:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 831 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9483 KB; 2026-03-29 20:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 831 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9484 KB; 2026-03-29 20:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 832 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9494 KB; 2026-03-29 20:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 832 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9491 KB; 2026-03-29 20:34:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 20:27:44, To:, 2026-03-29 20:34:30, Duration (s):, 406, Events Per Second:, 0.101, Events:, 41, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 40, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7535 2026-03-29 20:34:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s491ms. 2026-03-29 20:34:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:34:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 20:34:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:34:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 819 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9477 KB; 2026-03-29 20:36:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 20:36:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 20:36:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 20:36:04 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 20:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 823 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9461 KB; 2026-03-29 20:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9514 KB; 2026-03-29 20:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 738 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9611 KB; 2026-03-29 20:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9653 KB; 2026-03-29 20:39:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:39:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 20:39:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:39:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9706 KB; 2026-03-29 20:41:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 20:41:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 20:41:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 20:41:04 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 20:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 129 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9651 KB; 2026-03-29 20:41:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 20:34:24, To:, 2026-03-29 20:41:30, Duration (s):, 426, Events Per Second:, 0.684, Events:, 292, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 291, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37727 2026-03-29 20:41:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s306ms. 2026-03-29 20:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9605 KB; 2026-03-29 20:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 126 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9605 KB; 2026-03-29 20:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 689 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9675 KB; 2026-03-29 20:44:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:44:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 20:44:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:44:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 131 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9667 KB; 2026-03-29 20:46:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 20:46:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 20:46:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 20:46:04 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 20:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9652 KB; 2026-03-29 20:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 135 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9676 KB; 2026-03-29 20:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 135 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9694 KB; 2026-03-29 20:48:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 20:41:42, To:, 2026-03-29 20:48:30, Duration (s):, 408, Events Per Second:, 0.294, Events:, 120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 119, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16625 2026-03-29 20:48:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s863ms. 2026-03-29 20:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 847 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9597 KB; 2026-03-29 20:49:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:49:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 20:49:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:49:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9613 KB; 2026-03-29 20:51:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 20:51:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 20:51:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 20:51:04 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 20:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9602 KB; 2026-03-29 20:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 868 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9562 KB; 2026-03-29 20:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 869 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9582 KB; 2026-03-29 20:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 870 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 145 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9582 KB; 2026-03-29 20:54:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:54:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 20:54:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:54:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 878 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 152 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9602 KB; 2026-03-29 20:55:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 20:48:24, To:, 2026-03-29 20:55:30, Duration (s):, 426, Events Per Second:, 0.262, Events:, 112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 109, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16894 2026-03-29 20:55:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s477ms. 2026-03-29 20:56:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 20:56:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 20:56:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 20:56:05 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 20:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 146 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9517 KB; 2026-03-29 20:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 144 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9612 KB; 2026-03-29 20:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 738 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 144 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9631 KB; 2026-03-29 20:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 840 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 195 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9611 KB; 2026-03-29 20:59:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:59:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 20:59:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 20:59:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 157 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9606 KB; 2026-03-29 21:01:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 21:01:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 21:01:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 21:01:05 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 21:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 208 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9792 KB; 2026-03-29 21:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9773 KB; 2026-03-29 21:02:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 20:55:42, To:, 2026-03-29 21:02:30, Duration (s):, 408, Events Per Second:, 0.864, Events:, 353, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 352, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 45798 2026-03-29 21:02:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s226ms. 2026-03-29 21:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9739 KB; 2026-03-29 21:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 611 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 225 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9737 KB; 2026-03-29 21:04:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:04:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 21:04:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:04:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 614 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 274 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9905 KB; 2026-03-29 21:06:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 21:06:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 21:06:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 21:06:05 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 21:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1016 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9839 KB; 2026-03-29 21:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1019 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9841 KB; 2026-03-29 21:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1029 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9842 KB; 2026-03-29 21:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1078 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 212 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 61 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9890 KB; 2026-03-29 21:09:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 21:02:47, To:, 2026-03-29 21:09:30, Duration (s):, 403, Events Per Second:, 0.916, Events:, 370, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 369, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 45409 2026-03-29 21:09:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s845ms. 2026-03-29 21:09:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:09:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 21:09:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:09:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 882 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; rules::ProcessConditionsCache: 217 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9633 KB; 2026-03-29 21:11:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 21:11:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 21:11:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 21:11:05 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 21:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 219 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9629 KB; 2026-03-29 21:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 219 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9636 KB; 2026-03-29 21:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 890 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 221 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9652 KB; 2026-03-29 21:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 219 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9694 KB; 2026-03-29 21:14:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:14:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 21:14:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:14:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 219 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9726 KB; 2026-03-29 21:16:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 21:16:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 21:16:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 21:16:06 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 21:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 236 KB; rules::ProcessConditionsCache: 224 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9751 KB; 2026-03-29 21:16:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 21:09:59, To:, 2026-03-29 21:16:30, Duration (s):, 391, Events Per Second:, 0.431, Events:, 169, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 168, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22689 2026-03-29 21:16:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s667ms. 2026-03-29 21:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 222 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9651 KB; 2026-03-29 21:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 222 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9655 KB; 2026-03-29 21:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 882 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9640 KB; 2026-03-29 21:19:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:19:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 21:19:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:19:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9655 KB; 2026-03-29 21:21:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 21:21:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 21:21:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 21:21:06 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 21:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9664 KB; 2026-03-29 21:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9711 KB; 2026-03-29 21:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 283 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9831 KB; 2026-03-29 21:23:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 21:16:35, To:, 2026-03-29 21:23:30, Duration (s):, 415, Events Per Second:, 0.378, Events:, 157, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 156, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22024 2026-03-29 21:23:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s941ms. 2026-03-29 21:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 868 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 239 KB; rules::ProcessConditionsCache: 237 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9679 KB; 2026-03-29 21:24:51 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:24:51 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 21:24:51 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:24:51 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 611 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 259 KB; rules::ProcessConditionsCache: 241 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9739 KB; 2026-03-29 21:26:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 21:26:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 21:26:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 21:26:06 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 21:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 241 KB; rules::ProcessConditionsCache: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9714 KB; 2026-03-29 21:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9690 KB; 2026-03-29 21:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9692 KB; 2026-03-29 21:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9763 KB; 2026-03-29 21:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 21:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9824 KB; 2026-03-29 21:30:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 21:23:30, To:, 2026-03-29 21:30:30, Duration (s):, 420, Events Per Second:, 0.492, Events:, 207, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 206, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29052 2026-03-29 21:30:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s434ms. 2026-03-29 21:31:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 21:31:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 21:31:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 21:31:06 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 21:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 768 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 353 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10032 KB; 2026-03-29 21:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 254 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9797 KB; 2026-03-29 21:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 909 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 249 KB; rules::ProcessConditionsCache: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9801 KB; 2026-03-29 21:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 261 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9803 KB; 2026-03-29 21:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 21:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9758 KB; 2026-03-29 21:36:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 21:36:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 21:36:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 21:36:06 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 21:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9745 KB; 2026-03-29 21:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 307 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9864 KB; 2026-03-29 21:37:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 21:30:26, To:, 2026-03-29 21:37:30, Duration (s):, 424, Events Per Second:, 0.638, Events:, 271, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 270, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36285 2026-03-29 21:37:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s301ms. 2026-03-29 21:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 250 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9658 KB; 2026-03-29 21:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 268 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9760 KB; 2026-03-29 21:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 21:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 259 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9799 KB; 2026-03-29 21:41:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 21:41:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 21:41:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 21:41:06 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 21:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 327 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9910 KB; 2026-03-29 21:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 263 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9839 KB; 2026-03-29 21:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9834 KB; 2026-03-29 21:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9834 KB; 2026-03-29 21:44:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 21:37:30, To:, 2026-03-29 21:44:30, Duration (s):, 420, Events Per Second:, 0.639, Events:, 269, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 268, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36350 2026-03-29 21:44:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s923ms. 2026-03-29 21:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 21:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 837 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9674 KB; 2026-03-29 21:46:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 21:46:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 21:46:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 21:46:07 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 21:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 375 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9886 KB; 2026-03-29 21:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 316 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9890 KB; 2026-03-29 21:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 316 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9898 KB; 2026-03-29 21:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 316 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9894 KB; 2026-03-29 21:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 21:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9842 KB; 2026-03-29 21:51:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 21:51:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 21:51:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 21:51:08 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 21:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9860 KB; 2026-03-29 21:51:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 21:44:53, To:, 2026-03-29 21:51:30, Duration (s):, 397, Events Per Second:, 0.729, Events:, 290, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 265, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36143 2026-03-29 21:51:31 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s668ms. 2026-03-29 21:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 823 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 322 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9691 KB; 2026-03-29 21:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 823 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 232 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9700 KB; 2026-03-29 21:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 829 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9730 KB; 2026-03-29 21:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 21:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 837 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 326 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9699 KB; 2026-03-29 21:56:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 21:56:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 21:56:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 21:56:08 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 21:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 838 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 328 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9712 KB; 2026-03-29 21:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 841 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 333 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9769 KB; 2026-03-29 21:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 841 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 326 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9752 KB; 2026-03-29 21:58:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 21:53:10, To:, 2026-03-29 21:58:30, Duration (s):, 320, Events Per Second:, 0.156, Events:, 50, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 49, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8829 2026-03-29 21:58:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s539ms. 2026-03-29 21:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 832 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 781 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 347 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9891 KB; 2026-03-29 21:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 21:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 21:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 847 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 704 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9827 KB; 2026-03-29 22:01:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 22:01:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 22:01:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 22:01:08 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 22:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 851 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 705 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9851 KB; 2026-03-29 22:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 851 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9799 KB; 2026-03-29 22:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 364 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9846 KB; 2026-03-29 22:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 364 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9858 KB; 2026-03-29 22:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 22:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 345 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9840 KB; 2026-03-29 22:05:30 7967594126c0 Info: Events Statistics, From:, 2026-03-29 21:58:37, To:, 2026-03-29 22:05:30, Duration (s):, 413, Events Per Second:, 0.524, Events:, 217, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 216, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28489 2026-03-29 22:05:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s140ms. 2026-03-29 22:06:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 22:06:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 22:06:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 22:06:08 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 22:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9624 KB; 2026-03-29 22:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9529 KB; 2026-03-29 22:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9584 KB; 2026-03-29 22:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 41 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9692 KB; 2026-03-29 22:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 22:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 91 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9811 KB; 2026-03-29 22:11:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 22:11:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 22:11:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 22:11:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 22:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 50 KB; rules::ProcessConditionsCache: 47 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9770 KB; 2026-03-29 22:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1100 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 102 KB; BaseEvent: 61 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9925 KB; 2026-03-29 22:12:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 22:05:47, To:, 2026-03-29 22:12:30, Duration (s):, 403, Events Per Second:, 1.537, Events:, 621, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 620, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 74736 2026-03-29 22:12:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s850ms. 2026-03-29 22:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9572 KB; 2026-03-29 22:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9547 KB; 2026-03-29 22:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 22:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9537 KB; 2026-03-29 22:16:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 22:16:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 22:16:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 22:16:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 22:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9606 KB; 2026-03-29 22:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9576 KB; 2026-03-29 22:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9572 KB; 2026-03-29 22:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9794 KB; 2026-03-29 22:19:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 22:12:31, To:, 2026-03-29 22:19:31, Duration (s):, 420, Events Per Second:, 0.548, Events:, 230, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 224, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32648 2026-03-29 22:19:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s474ms. 2026-03-29 22:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 22:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9560 KB; 2026-03-29 22:21:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 22:21:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 22:21:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 22:21:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 22:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 945 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 294 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9705 KB; 2026-03-29 22:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9671 KB; 2026-03-29 22:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9693 KB; 2026-03-29 22:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9724 KB; 2026-03-29 22:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 22:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9711 KB; 2026-03-29 22:26:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 22:26:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 22:26:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 22:26:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 22:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1011 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9692 KB; 2026-03-29 22:26:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 22:19:30, To:, 2026-03-29 22:26:31, Duration (s):, 421, Events Per Second:, 0.871, Events:, 367, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 366, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47773 2026-03-29 22:26:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s366ms. 2026-03-29 22:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9473 KB; 2026-03-29 22:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 879 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9503 KB; 2026-03-29 22:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9510 KB; 2026-03-29 22:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 22:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 215 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9575 KB; 2026-03-29 22:31:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 22:31:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 22:31:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 22:31:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 22:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9570 KB; 2026-03-29 22:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9619 KB; 2026-03-29 22:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9608 KB; 2026-03-29 22:33:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 22:26:31, To:, 2026-03-29 22:33:31, Duration (s):, 420, Events Per Second:, 0.609, Events:, 256, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 255, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32437 2026-03-29 22:33:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s701ms. 2026-03-29 22:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 847 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9469 KB; 2026-03-29 22:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 22:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 848 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9453 KB; 2026-03-29 22:36:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 22:36:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 22:36:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 22:36:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 22:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 848 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9437 KB; 2026-03-29 22:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 848 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9440 KB; 2026-03-29 22:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 82 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9499 KB; 2026-03-29 22:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 117 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9653 KB; 2026-03-29 22:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 22:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9626 KB; 2026-03-29 22:40:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 22:34:13, To:, 2026-03-29 22:40:31, Duration (s):, 378, Events Per Second:, 0.684, Events:, 259, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 258, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33509 2026-03-29 22:40:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s487ms. 2026-03-29 22:41:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 22:41:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 22:41:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 22:41:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 22:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 138 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9685 KB; 2026-03-29 22:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9593 KB; 2026-03-29 22:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9591 KB; 2026-03-29 22:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 611 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 101 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9675 KB; 2026-03-29 22:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 22:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9708 KB; 2026-03-29 22:46:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 22:46:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 22:46:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 22:46:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 22:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 239 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9729 KB; 2026-03-29 22:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9720 KB; 2026-03-29 22:47:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 22:40:46, To:, 2026-03-29 22:47:31, Duration (s):, 405, Events Per Second:, 0.597, Events:, 242, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 241, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30604 2026-03-29 22:47:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s676ms. 2026-03-29 22:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 850 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9505 KB; 2026-03-29 22:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 850 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9513 KB; 2026-03-29 22:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 22:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 99 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9498 KB; 2026-03-29 22:51:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 22:51:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 22:51:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 22:51:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 22:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9546 KB; 2026-03-29 22:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 909 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 101 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9605 KB; 2026-03-29 22:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9615 KB; 2026-03-29 22:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9597 KB; 2026-03-29 22:54:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 22:47:50, To:, 2026-03-29 22:54:31, Duration (s):, 401, Events Per Second:, 0.488, Events:, 196, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 195, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25649 2026-03-29 22:54:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s659ms. 2026-03-29 22:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 22:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 872 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9536 KB; 2026-03-29 22:56:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 22:56:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 22:56:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 22:56:09 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 22:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 119 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9548 KB; 2026-03-29 22:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 220 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9554 KB; 2026-03-29 22:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 110 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9564 KB; 2026-03-29 22:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9582 KB; 2026-03-29 22:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 22:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 22:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 143 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9767 KB; 2026-03-29 23:01:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 23:01:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 23:01:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 23:01:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 23:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 121 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9783 KB; 2026-03-29 23:01:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 22:54:32, To:, 2026-03-29 23:01:31, Duration (s):, 419, Events Per Second:, 0.732, Events:, 307, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 306, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39661 2026-03-29 23:01:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s694ms. 2026-03-29 23:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 142 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9681 KB; 2026-03-29 23:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9627 KB; 2026-03-29 23:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9745 KB; 2026-03-29 23:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 23:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9662 KB; 2026-03-29 23:06:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 23:06:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 23:06:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 23:06:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 23:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 155 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9749 KB; 2026-03-29 23:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 124 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9716 KB; 2026-03-29 23:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1036 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 277 KB; rules::ProcessConditionsCache: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9937 KB; 2026-03-29 23:08:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 23:01:46, To:, 2026-03-29 23:08:31, Duration (s):, 405, Events Per Second:, 0.846, Events:, 343, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 342, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44227 2026-03-29 23:08:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s871ms. 2026-03-29 23:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 153 KB; ProcessInfoCommandLineTag: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9782 KB; 2026-03-29 23:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 23:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 139 KB; ProcessInfoCommandLineTag: 63 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9812 KB; 2026-03-29 23:11:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 23:11:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 23:11:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 23:11:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 23:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 148 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9857 KB; 2026-03-29 23:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1036 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 139 KB; ProcessInfoCommandLineTag: 64 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9832 KB; 2026-03-29 23:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1070 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 64 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9963 KB; 2026-03-29 23:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1076 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 157 KB; ProcessInfoCommandLineTag: 64 KB; BaseEvent: 51 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9934 KB; 2026-03-29 23:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 23:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 1086 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 154 KB; BaseEvent: 65 KB; ProcessInfoCommandLineTag: 64 KB; ExtendedTcpIpConnectionInfo: 41 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10038 KB; 2026-03-29 23:15:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 23:08:31, To:, 2026-03-29 23:15:31, Duration (s):, 420, Events Per Second:, 1.355, Events:, 570, File:, 20, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 529, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 20, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 72688 2026-03-29 23:15:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s862ms. 2026-03-29 23:16:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 23:16:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 23:16:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 23:16:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 23:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 872 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 705 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 140 KB; ExtendedTcpIpConnectionInfo: 63 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9750 KB; 2026-03-29 23:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 672 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 140 KB; ExtendedTcpIpConnectionInfo: 69 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9719 KB; 2026-03-29 23:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 685 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 160 KB; ExtendedTcpIpConnectionInfo: 75 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9900 KB; 2026-03-29 23:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 281 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; rules::ProcessConditionsCache: 162 KB; cloudutils::CloudData: 160 KB; ExtendedTcpIpConnectionInfo: 74 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9878 KB; 2026-03-29 23:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 23:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 222 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 147 KB; ExtendedTcpIpConnectionInfo: 56 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9758 KB; 2026-03-29 23:21:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 23:21:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 23:21:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 23:21:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 23:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 162 KB; cloudutils::CloudData: 160 KB; ExtendedTcpIpConnectionInfo: 58 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9778 KB; 2026-03-29 23:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 216 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 149 KB; ExtendedTcpIpConnectionInfo: 50 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9800 KB; 2026-03-29 23:22:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 23:15:46, To:, 2026-03-29 23:22:31, Duration (s):, 405, Events Per Second:, 0.740, Events:, 300, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 299, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37735 2026-03-29 23:22:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s761ms. 2026-03-29 23:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 228 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9712 KB; 2026-03-29 23:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 906 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9675 KB; 2026-03-29 23:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 23:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 150 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9642 KB; 2026-03-29 23:26:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 23:26:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 23:26:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 23:26:10 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 23:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 150 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9646 KB; 2026-03-29 23:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 213 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9672 KB; 2026-03-29 23:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9762 KB; 2026-03-29 23:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 254 KB; rules::ProcessConditionsCache: 240 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 227 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9874 KB; 2026-03-29 23:29:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 23:22:32, To:, 2026-03-29 23:29:31, Duration (s):, 419, Events Per Second:, 0.679, Events:, 285, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 284, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36961 2026-03-29 23:29:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s741ms. 2026-03-29 23:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 23:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2325 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 226 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9733 KB; 2026-03-29 23:31:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 23:31:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 23:31:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 23:31:11 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 23:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9827 KB; 2026-03-29 23:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 687 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 233 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9818 KB; 2026-03-29 23:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 216 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9731 KB; 2026-03-29 23:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 210 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9732 KB; 2026-03-29 23:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 23:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 614 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9736 KB; 2026-03-29 23:36:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 23:36:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 23:36:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 23:36:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 23:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 944 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; TcpIpConnectionsManager: 203 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9732 KB; 2026-03-29 23:36:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 23:29:31, To:, 2026-03-29 23:36:31, Duration (s):, 420, Events Per Second:, 0.613, Events:, 258, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 187, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 35, Livegrid:, 35, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33015 2026-03-29 23:36:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s701ms. 2026-03-29 23:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 219 KB; TcpIpConnectionsManager: 210 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9581 KB; 2026-03-29 23:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9597 KB; 2026-03-29 23:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 226 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 223 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 160 KB; BaseEvent: 63 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9750 KB; 2026-03-29 23:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 23:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 160 KB; BaseEvent: 80 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9861 KB; 2026-03-29 23:41:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 23:41:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 23:41:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 23:41:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 23:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 160 KB; BaseEvent: 85 KB; ProcessInfoCommandLineTag: 57 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9893 KB; 2026-03-29 23:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 160 KB; BaseEvent: 88 KB; ProcessInfoCommandLineTag: 57 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9880 KB; 2026-03-29 23:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 221 KB; TcpIpConnectionsManager: 220 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 160 KB; BaseEvent: 93 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9890 KB; 2026-03-29 23:43:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 23:36:32, To:, 2026-03-29 23:43:31, Duration (s):, 419, Events Per Second:, 1.394, Events:, 585, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 398, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 93, Livegrid:, 93, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 65832 2026-03-29 23:43:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s666ms. 2026-03-29 23:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; rules::ProcessConditionsCache: 219 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9667 KB; 2026-03-29 23:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 23:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9637 KB; 2026-03-29 23:46:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 23:46:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 23:46:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 23:46:12 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 23:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9766 KB; 2026-03-29 23:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 269 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9828 KB; 2026-03-29 23:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 218 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9738 KB; 2026-03-29 23:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 1022 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 326 KB; rules::ProcessConditionsCache: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 160 KB; BaseEvent: 63 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10085 KB; 2026-03-29 23:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 23:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 1026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 292 KB; rules::ProcessConditionsCache: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 217 KB; cloudutils::CloudData: 160 KB; BaseEvent: 69 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10004 KB; 2026-03-29 23:50:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 23:43:32, To:, 2026-03-29 23:50:31, Duration (s):, 419, Events Per Second:, 1.246, Events:, 523, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 450, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 25, Livegrid:, 25, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 61193 2026-03-29 23:50:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s863ms. 2026-03-29 23:51:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 23:51:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 23:51:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 23:51:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 23:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 948 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 266 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9808 KB; 2026-03-29 23:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 292 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10007 KB; 2026-03-29 23:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 292 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10033 KB; 2026-03-29 23:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 1004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 753 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 295 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 230 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10060 KB; 2026-03-29 23:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 23:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 1010 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 715 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10007 KB; 2026-03-29 23:56:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-29 23:56:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-29 23:56:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-29 23:56:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-29 23:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 1014 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 291 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 235 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10019 KB; 2026-03-29 23:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 1017 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 705 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10014 KB; 2026-03-29 23:57:31 7967594126c0 Info: Events Statistics, From:, 2026-03-29 23:51:10, To:, 2026-03-29 23:57:31, Duration (s):, 381, Events Per Second:, 0.506, Events:, 193, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 184, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26363 2026-03-29 23:57:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s319ms. 2026-03-29 23:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 848 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 686 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9777 KB; 2026-03-29 23:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 707 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 309 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9828 KB; 2026-03-29 23:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-29 23:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-29 23:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)