| Server IP : 104.21.84.107 / Your IP : 104.23.243.197 Web Server : Apache/2.4.63 (Ubuntu) System : Linux adminpruebas-Virtual-Machine 6.14.0-37-generic #37-Ubuntu SMP PREEMPT_DYNAMIC Fri Nov 14 22:10:32 UTC 2025 x86_64 User : www-data ( 33) PHP Version : 8.4.5 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /var/log/eset/eei/ |
Upload File : |
Version: 2.8.5555 (Oct 13 2025 18:38:28) Compiled with: Clang Version: 18.1.3 Npm: 10.8.2 HardwareInfo: CPU: IntelXeon, cores: 240, RAM: 7GB TelemetryId: Server d38ecbca8f660598256b227c9815089ffeddc553 2026-03-30 00:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; rules::ProcessConditionsCache: 335 KB; TcpIpConnectionsManager: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 224 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9872 KB; 2026-03-30 00:01:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 00:01:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 00:01:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 00:01:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 00:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; rules::ProcessConditionsCache: 377 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 238 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 225 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10031 KB; 2026-03-30 00:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 1022 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 237 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 21 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9736 KB; 2026-03-30 00:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 1028 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 231 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 229 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9808 KB; 2026-03-30 00:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 1069 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 233 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 92 KB; BaseEvent: 56 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9944 KB; 2026-03-30 00:04:32 7967594126c0 Info: Events Statistics, From:, 2026-03-29 23:57:38, To:, 2026-03-30 00:04:31, Duration (s):, 413, Events Per Second:, 1.428, Events:, 591, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 569, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 9, Livegrid:, 9, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 74283 2026-03-30 00:04:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s666ms. 2026-03-30 00:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 00:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 682 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 236 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9719 KB; 2026-03-30 00:06:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 00:06:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 00:06:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 00:06:14 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 00:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 685 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9750 KB; 2026-03-30 00:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 231 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9616 KB; 2026-03-30 00:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9683 KB; 2026-03-30 00:09:23 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 139 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9743 KB; 2026-03-30 00:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 00:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 139 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9729 KB; 2026-03-30 00:11:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 00:11:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 00:11:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 00:11:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 00:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 139 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9730 KB; 2026-03-30 00:11:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 00:04:19, To:, 2026-03-30 00:11:32, Duration (s):, 433, Events Per Second:, 0.275, Events:, 119, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 116, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19594 2026-03-30 00:11:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s986ms. 2026-03-30 00:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 140 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9634 KB; 2026-03-30 00:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 140 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9634 KB; 2026-03-30 00:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 866 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 409 KB; CacheEntry: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9613 KB; 2026-03-30 00:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 00:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9652 KB; 2026-03-30 00:16:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 00:16:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 00:16:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 00:16:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 00:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9650 KB; 2026-03-30 00:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 248 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 50 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9762 KB; 2026-03-30 00:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 233 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 50 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9747 KB; 2026-03-30 00:18:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 00:06:52, To:, 2026-03-30 00:18:32, Duration (s):, 700, Events Per Second:, 0.356, Events:, 249, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 172, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 38, Livegrid:, 38, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34269 2026-03-30 00:18:37 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s014ms. 2026-03-30 00:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 233 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9654 KB; 2026-03-30 00:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 00:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9627 KB; 2026-03-30 00:21:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 00:21:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 00:21:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 00:21:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 00:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9627 KB; 2026-03-30 00:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9636 KB; 2026-03-30 00:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2326 KB; ProcessInfo: 903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 223 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 18 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9698 KB; 2026-03-30 00:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 244 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 20 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9752 KB; 2026-03-30 00:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 00:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 270 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9920 KB; 2026-03-30 00:25:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 00:15:00, To:, 2026-03-30 00:25:32, Duration (s):, 632, Events Per Second:, 0.381, Events:, 241, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 238, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33524 2026-03-30 00:25:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s968ms. 2026-03-30 00:26:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 00:26:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 00:26:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 00:26:15 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 00:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; TcpIpConnectionsManager: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 261 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9818 KB; 2026-03-30 00:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; TcpIpConnectionsManager: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 274 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9925 KB; 2026-03-30 00:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 157 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 18 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9783 KB; 2026-03-30 00:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; TcpIpConnectionsManager: 243 KB; rules::ProcessConditionsCache: 163 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9792 KB; 2026-03-30 00:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 00:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 152 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9773 KB; 2026-03-30 00:31:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 00:31:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 00:31:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 00:31:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 00:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9765 KB; 2026-03-30 00:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 207 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9763 KB; 2026-03-30 00:32:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 00:25:27, To:, 2026-03-30 00:32:32, Duration (s):, 425, Events Per Second:, 0.303, Events:, 129, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 120, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19869 2026-03-30 00:32:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s120ms. 2026-03-30 00:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 162 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9614 KB; 2026-03-30 00:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 162 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9614 KB; 2026-03-30 00:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 00:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 410 KB; CacheEntry: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 162 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9614 KB; 2026-03-30 00:36:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 00:36:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 00:36:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 00:36:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 00:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 906 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 239 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9728 KB; 2026-03-30 00:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9862 KB; 2026-03-30 00:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; TcpIpConnectionsManager: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9946 KB; 2026-03-30 00:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 1026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 238 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 160 KB; BaseEvent: 66 KB; ProcessInfoCommandLineTag: 60 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9969 KB; 2026-03-30 00:39:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 00:30:28, To:, 2026-03-30 00:39:32, Duration (s):, 544, Events Per Second:, 1.004, Events:, 547, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 442, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 52, Livegrid:, 52, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 65280 2026-03-30 00:39:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s468ms. 2026-03-30 00:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 00:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 228 KB; rules::ProcessConditionsCache: 213 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9820 KB; 2026-03-30 00:41:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 00:41:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 00:41:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 00:41:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 00:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 975 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::ProcessConditionsCache: 213 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9805 KB; 2026-03-30 00:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 975 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 213 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9803 KB; 2026-03-30 00:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 975 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::ProcessConditionsCache: 213 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9806 KB; 2026-03-30 00:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; rules::ProcessConditionsCache: 215 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9817 KB; 2026-03-30 00:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 00:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::ProcessConditionsCache: 215 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9820 KB; 2026-03-30 00:46:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 00:46:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 00:46:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 00:46:18 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 00:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::ProcessConditionsCache: 215 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9863 KB; 2026-03-30 00:46:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 00:40:04, To:, 2026-03-30 00:46:32, Duration (s):, 388, Events Per Second:, 0.072, Events:, 28, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 27, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6037 2026-03-30 00:46:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s401ms. 2026-03-30 00:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::ProcessConditionsCache: 217 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9717 KB; 2026-03-30 00:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 215 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9712 KB; 2026-03-30 00:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 688 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::ProcessConditionsCache: 215 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9737 KB; 2026-03-30 00:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 00:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 876 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 695 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; rules::ProcessConditionsCache: 233 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9799 KB; 2026-03-30 00:51:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 00:51:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 00:51:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 00:51:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 00:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; rules::ProcessConditionsCache: 235 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9789 KB; 2026-03-30 00:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::ProcessConditionsCache: 231 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9764 KB; 2026-03-30 00:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 283 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9904 KB; 2026-03-30 00:53:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 00:46:41, To:, 2026-03-30 00:53:32, Duration (s):, 411, Events Per Second:, 0.513, Events:, 211, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 180, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 15, Livegrid:, 15, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27186 2026-03-30 00:53:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s151ms. 2026-03-30 00:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 230 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9806 KB; 2026-03-30 00:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 00:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::ProcessConditionsCache: 232 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9809 KB; 2026-03-30 00:56:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 00:56:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 00:56:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 00:56:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 00:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 241 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9820 KB; 2026-03-30 00:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::ProcessConditionsCache: 232 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9781 KB; 2026-03-30 00:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 232 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9784 KB; 2026-03-30 00:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; rules::ProcessConditionsCache: 232 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9780 KB; 2026-03-30 00:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 00:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 00:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 296 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9941 KB; 2026-03-30 01:00:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 00:53:32, To:, 2026-03-30 01:00:32, Duration (s):, 420, Events Per Second:, 0.380, Events:, 160, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 159, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24238 2026-03-30 01:00:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s515ms. 2026-03-30 01:01:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 01:01:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 01:01:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 01:01:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 01:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9773 KB; 2026-03-30 01:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9773 KB; 2026-03-30 01:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::ProcessConditionsCache: 245 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9760 KB; 2026-03-30 01:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 245 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9785 KB; 2026-03-30 01:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 01:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::ProcessConditionsCache: 248 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9793 KB; 2026-03-30 01:06:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 01:06:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 01:06:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 01:06:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 01:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; rules::ProcessConditionsCache: 248 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9801 KB; 2026-03-30 01:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; rules::ProcessConditionsCache: 248 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9789 KB; 2026-03-30 01:07:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 01:00:32, To:, 2026-03-30 01:07:32, Duration (s):, 420, Events Per Second:, 0.062, Events:, 26, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 25, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 5917 2026-03-30 01:07:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s547ms. 2026-03-30 01:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::ProcessConditionsCache: 248 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9735 KB; 2026-03-30 01:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9838 KB; 2026-03-30 01:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 01:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9839 KB; 2026-03-30 01:11:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 01:11:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 01:11:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 01:11:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 01:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9817 KB; 2026-03-30 01:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9849 KB; 2026-03-30 01:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9852 KB; 2026-03-30 01:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9899 KB; 2026-03-30 01:14:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 01:08:11, To:, 2026-03-30 01:14:32, Duration (s):, 381, Events Per Second:, 0.660, Events:, 252, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 251, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32876 2026-03-30 01:14:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s701ms. 2026-03-30 01:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 01:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9785 KB; 2026-03-30 01:16:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 01:16:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 01:16:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 01:16:19 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 01:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9783 KB; 2026-03-30 01:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 890 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9767 KB; 2026-03-30 01:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9771 KB; 2026-03-30 01:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 268 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9781 KB; 2026-03-30 01:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 01:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9773 KB; 2026-03-30 01:21:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 01:21:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 01:21:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 01:21:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 01:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9779 KB; 2026-03-30 01:21:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 01:15:00, To:, 2026-03-30 01:21:32, Duration (s):, 392, Events Per Second:, 0.104, Events:, 41, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 38, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7378 2026-03-30 01:21:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s949ms. 2026-03-30 01:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 870 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 308 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9803 KB; 2026-03-30 01:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9780 KB; 2026-03-30 01:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9785 KB; 2026-03-30 01:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 01:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9795 KB; 2026-03-30 01:26:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 01:26:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 01:26:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 01:26:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 01:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9778 KB; 2026-03-30 01:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9766 KB; 2026-03-30 01:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9767 KB; 2026-03-30 01:28:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 01:22:17, To:, 2026-03-30 01:28:32, Duration (s):, 375, Events Per Second:, 0.208, Events:, 78, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 77, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12079 2026-03-30 01:28:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s841ms. 2026-03-30 01:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 850 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9726 KB; 2026-03-30 01:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 01:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2328 KB; ProcessInfo: 863 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 411 KB; CacheEntry: 339 KB; rules::ProcessConditionsCache: 286 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9760 KB; 2026-03-30 01:31:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 01:31:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 01:31:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 01:31:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 01:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 863 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 412 KB; CacheEntry: 340 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9777 KB; 2026-03-30 01:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 875 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 412 KB; CacheEntry: 340 KB; rules::ProcessConditionsCache: 299 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 259 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9811 KB; 2026-03-30 01:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 875 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 412 KB; CacheEntry: 340 KB; rules::ProcessConditionsCache: 286 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9790 KB; 2026-03-30 01:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 875 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 412 KB; CacheEntry: 340 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9797 KB; 2026-03-30 01:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 01:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 879 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 412 KB; CacheEntry: 340 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9803 KB; 2026-03-30 01:35:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 01:29:33, To:, 2026-03-30 01:35:32, Duration (s):, 359, Events Per Second:, 0.203, Events:, 73, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 72, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 11181 2026-03-30 01:35:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s511ms. 2026-03-30 01:36:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 01:36:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 01:36:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 01:36:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 01:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 412 KB; CacheEntry: 340 KB; rules::ProcessConditionsCache: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9764 KB; 2026-03-30 01:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 412 KB; CacheEntry: 340 KB; rules::ProcessConditionsCache: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9758 KB; 2026-03-30 01:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 412 KB; CacheEntry: 340 KB; rules::ProcessConditionsCache: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9759 KB; 2026-03-30 01:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 412 KB; CacheEntry: 340 KB; rules::ProcessConditionsCache: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9767 KB; 2026-03-30 01:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 01:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 412 KB; CacheEntry: 340 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9843 KB; 2026-03-30 01:41:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 01:41:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 01:41:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 01:41:20 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 01:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 412 KB; rules::ProcessConditionsCache: 362 KB; CacheEntry: 340 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10042 KB; 2026-03-30 01:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 412 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 340 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10054 KB; 2026-03-30 01:42:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 01:36:41, To:, 2026-03-30 01:42:32, Duration (s):, 351, Events Per Second:, 0.984, Events:, 346, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 322, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43288 2026-03-30 01:42:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s894ms. 2026-03-30 01:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 412 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 340 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9941 KB; 2026-03-30 01:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 412 KB; rules::ProcessConditionsCache: 376 KB; CacheEntry: 340 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9981 KB; 2026-03-30 01:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 01:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2337 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 412 KB; CacheEntry: 340 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 161 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9698 KB; 2026-03-30 01:46:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 01:46:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 01:46:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 01:46:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 01:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 163 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9755 KB; 2026-03-30 01:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 163 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9752 KB; 2026-03-30 01:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 163 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9713 KB; 2026-03-30 01:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 994 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 163 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9735 KB; 2026-03-30 01:49:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 01:43:36, To:, 2026-03-30 01:49:32, Duration (s):, 356, Events Per Second:, 0.446, Events:, 159, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 147, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21087 2026-03-30 01:49:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s669ms. 2026-03-30 01:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 01:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 163 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9569 KB; 2026-03-30 01:51:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 01:51:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 01:51:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 01:51:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 01:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 163 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9571 KB; 2026-03-30 01:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 863 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 163 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9579 KB; 2026-03-30 01:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 863 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 163 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9575 KB; 2026-03-30 01:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 863 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 163 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9577 KB; 2026-03-30 01:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 01:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 163 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9587 KB; 2026-03-30 01:56:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 01:56:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 01:56:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 01:56:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 01:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 866 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 163 KB; rules::ProcessConditionsCache: 48 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9593 KB; 2026-03-30 01:56:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 01:49:43, To:, 2026-03-30 01:56:32, Duration (s):, 409, Events Per Second:, 0.071, Events:, 29, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 28, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6236 2026-03-30 01:56:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s541ms. 2026-03-30 01:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 163 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9578 KB; 2026-03-30 01:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 163 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9585 KB; 2026-03-30 01:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 163 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9650 KB; 2026-03-30 01:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 01:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 01:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2379 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 163 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9659 KB; 2026-03-30 02:01:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 02:01:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 02:01:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 02:01:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 02:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9663 KB; 2026-03-30 02:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9654 KB; 2026-03-30 02:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9657 KB; 2026-03-30 02:03:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 01:56:37, To:, 2026-03-30 02:03:32, Duration (s):, 415, Events Per Second:, 0.303, Events:, 126, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 125, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18087 2026-03-30 02:03:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s193ms. 2026-03-30 02:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 851 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9588 KB; 2026-03-30 02:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 02:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9613 KB; 2026-03-30 02:06:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 02:06:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 02:06:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 02:06:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 02:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9618 KB; 2026-03-30 02:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9608 KB; 2026-03-30 02:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9616 KB; 2026-03-30 02:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9693 KB; 2026-03-30 02:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 02:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9718 KB; 2026-03-30 02:10:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 02:04:23, To:, 2026-03-30 02:10:32, Duration (s):, 369, Events Per Second:, 0.460, Events:, 170, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 169, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22927 2026-03-30 02:10:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s812ms. 2026-03-30 02:11:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 02:11:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 02:11:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 02:11:21 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 02:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9691 KB; 2026-03-30 02:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9693 KB; 2026-03-30 02:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 261 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9697 KB; 2026-03-30 02:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9696 KB; 2026-03-30 02:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 02:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 263 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 82 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9725 KB; 2026-03-30 02:16:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 02:16:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 02:16:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 02:16:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 02:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 82 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9733 KB; 2026-03-30 02:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 263 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 84 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9726 KB; 2026-03-30 02:17:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 02:10:40, To:, 2026-03-30 02:17:32, Duration (s):, 412, Events Per Second:, 0.068, Events:, 28, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 27, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 5663 2026-03-30 02:17:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s665ms. 2026-03-30 02:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 259 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9647 KB; 2026-03-30 02:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 868 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9633 KB; 2026-03-30 02:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 02:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 872 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9647 KB; 2026-03-30 02:21:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 02:21:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 02:21:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 02:21:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 02:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 872 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9646 KB; 2026-03-30 02:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 273 KB; TcpIpConnectionsManager: 264 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9868 KB; 2026-03-30 02:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 963 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 270 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 155 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9941 KB; 2026-03-30 02:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 1000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 263 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 160 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10025 KB; 2026-03-30 02:24:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 02:17:51, To:, 2026-03-30 02:24:32, Duration (s):, 401, Events Per Second:, 0.961, Events:, 386, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 385, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49706 2026-03-30 02:24:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s274ms. 2026-03-30 02:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 02:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9922 KB; 2026-03-30 02:26:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 02:26:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 02:26:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 02:26:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 02:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 1036 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 326 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10071 KB; 2026-03-30 02:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 1082 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10171 KB; 2026-03-30 02:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 1152 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; TcpIpConnectionsManager: 351 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 259 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10285 KB; 2026-03-30 02:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 1163 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; TcpIpConnectionsManager: 369 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 266 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 164 KB; BaseEvent: 52 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10299 KB; 2026-03-30 02:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 02:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2381 KB; ProcessInfo: 1180 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 338 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 133 KB; BaseEvent: 63 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10241 KB; 2026-03-30 02:31:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 02:31:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 02:31:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 02:31:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 02:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 1192 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 313 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 106 KB; BaseEvent: 71 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10182 KB; 2026-03-30 02:31:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 02:24:29, To:, 2026-03-30 02:31:32, Duration (s):, 423, Events Per Second:, 1.373, Events:, 582, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 581, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 73579 2026-03-30 02:31:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s022ms. 2026-03-30 02:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9795 KB; 2026-03-30 02:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 1006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 163 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9948 KB; 2026-03-30 02:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 1028 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 148 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9959 KB; 2026-03-30 02:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 02:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 1035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 106 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9933 KB; 2026-03-30 02:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 1035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9902 KB; 2026-03-30 02:36:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 02:36:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 02:36:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 02:36:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 02:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 1035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9868 KB; 2026-03-30 02:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 1050 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 130 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9941 KB; 2026-03-30 02:38:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 02:31:36, To:, 2026-03-30 02:38:32, Duration (s):, 416, Events Per Second:, 0.643, Events:, 268, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 264, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34078 2026-03-30 02:38:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s771ms. 2026-03-30 02:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 67 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9980 KB; 2026-03-30 02:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 02:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 991 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 67 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9921 KB; 2026-03-30 02:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 1029 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 308 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 259 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 68 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10085 KB; 2026-03-30 02:41:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 02:41:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 02:41:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 02:41:22 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 02:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 1053 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; cloudutils::CloudData: 164 KB; rules::ProcessConditionsCache: 157 KB; ProcessInfoCommandLineTag: 68 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10075 KB; 2026-03-30 02:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 1125 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 302 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 164 KB; BaseEvent: 81 KB; ProcessInfoCommandLineTag: 68 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10259 KB; 2026-03-30 02:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 1150 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 164 KB; BaseEvent: 96 KB; ProcessInfoCommandLineTag: 68 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10312 KB; 2026-03-30 02:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 02:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2382 KB; ProcessInfo: 1154 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::ProcessConditionsCache: 223 KB; cloudutils::CloudData: 164 KB; BaseEvent: 98 KB; ProcessInfoCommandLineTag: 68 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10286 KB; 2026-03-30 02:45:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 02:38:32, To:, 2026-03-30 02:45:32, Duration (s):, 420, Events Per Second:, 1.875, Events:, 789, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 737, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 49, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 96641 2026-03-30 02:45:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s195ms. 2026-03-30 02:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; rules::ProcessConditionsCache: 225 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9899 KB; 2026-03-30 02:46:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 02:46:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 02:46:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 02:46:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 02:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::ProcessConditionsCache: 230 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9895 KB; 2026-03-30 02:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 225 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9893 KB; 2026-03-30 02:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; rules::ProcessConditionsCache: 232 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9959 KB; 2026-03-30 02:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 02:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 232 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10015 KB; 2026-03-30 02:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1038 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10055 KB; 2026-03-30 02:51:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 02:51:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 02:51:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 02:51:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 02:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1038 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 234 KB; TcpIpConnectionsManager: 231 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10022 KB; 2026-03-30 02:52:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 02:45:22, To:, 2026-03-30 02:52:32, Duration (s):, 430, Events Per Second:, 0.497, Events:, 214, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 209, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27225 2026-03-30 02:52:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s137ms. 2026-03-30 02:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 236 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9822 KB; 2026-03-30 02:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 267 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9965 KB; 2026-03-30 02:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 02:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 317 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10116 KB; 2026-03-30 02:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1013 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 328 KB; rules::ProcessConditionsCache: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10102 KB; 2026-03-30 02:56:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 02:56:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 02:56:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 02:56:23 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 02:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1013 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10062 KB; 2026-03-30 02:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1038 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 275 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10112 KB; 2026-03-30 02:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 261 KB; rules::ProcessConditionsCache: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 165 KB; BaseEvent: 51 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10114 KB; 2026-03-30 02:59:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 02:52:49, To:, 2026-03-30 02:59:32, Duration (s):, 403, Events Per Second:, 1.233, Events:, 498, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 493, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 59103 2026-03-30 02:59:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s186ms. 2026-03-30 02:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 02:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 02:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 689 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 328 KB; TcpIpConnectionsManager: 308 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10148 KB; 2026-03-30 03:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1044 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 313 KB; TcpIpConnectionsManager: 294 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10171 KB; 2026-03-30 03:01:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 03:01:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 03:01:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 03:01:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 03:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1044 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 298 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10128 KB; 2026-03-30 03:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 373 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 294 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 259 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10321 KB; 2026-03-30 03:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 300 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 47 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10210 KB; 2026-03-30 03:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 03:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1097 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 302 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 48 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10214 KB; 2026-03-30 03:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1098 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 302 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 49 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10235 KB; 2026-03-30 03:06:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 03:06:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 03:06:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 03:06:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 03:06:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 02:59:34, To:, 2026-03-30 03:06:32, Duration (s):, 418, Events Per Second:, 1.220, Events:, 511, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 510, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 63209 2026-03-30 03:06:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s031ms. 2026-03-30 03:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 322 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9930 KB; 2026-03-30 03:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 231 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9972 KB; 2026-03-30 03:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 392 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 264 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10191 KB; 2026-03-30 03:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 03:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 315 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10084 KB; 2026-03-30 03:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 246 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10074 KB; 2026-03-30 03:11:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 03:11:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 03:11:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 03:11:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 03:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 340 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10127 KB; 2026-03-30 03:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10075 KB; 2026-03-30 03:13:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 03:06:28, To:, 2026-03-30 03:13:32, Duration (s):, 424, Events Per Second:, 0.831, Events:, 353, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 352, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44474 2026-03-30 03:13:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s919ms. 2026-03-30 03:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 869 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9881 KB; 2026-03-30 03:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 03:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9883 KB; 2026-03-30 03:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9913 KB; 2026-03-30 03:16:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 03:16:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 03:16:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 03:16:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 03:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 876 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9909 KB; 2026-03-30 03:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 333 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9944 KB; 2026-03-30 03:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 328 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 223 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9951 KB; 2026-03-30 03:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 03:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; rules::ProcessConditionsCache: 331 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 243 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10018 KB; 2026-03-30 03:20:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 03:14:42, To:, 2026-03-30 03:20:32, Duration (s):, 350, Events Per Second:, 0.382, Events:, 134, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 133, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18672 2026-03-30 03:20:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s529ms. 2026-03-30 03:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 944 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 88 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9823 KB; 2026-03-30 03:21:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 03:21:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 03:21:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 03:21:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 03:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 966 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9794 KB; 2026-03-30 03:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 966 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9771 KB; 2026-03-30 03:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 966 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9745 KB; 2026-03-30 03:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 03:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9713 KB; 2026-03-30 03:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 994 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 38 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9770 KB; 2026-03-30 03:26:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 03:26:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 03:26:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 03:26:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 03:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 994 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 38 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9782 KB; 2026-03-30 03:27:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 03:20:31, To:, 2026-03-30 03:27:32, Duration (s):, 421, Events Per Second:, 0.635, Events:, 268, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 267, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33634 2026-03-30 03:27:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s683ms. 2026-03-30 03:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9650 KB; 2026-03-30 03:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 687 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9678 KB; 2026-03-30 03:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 03:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 271 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9974 KB; 2026-03-30 03:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 692 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9851 KB; 2026-03-30 03:31:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 03:31:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 03:31:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 03:31:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 03:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 694 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9834 KB; 2026-03-30 03:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 696 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9833 KB; 2026-03-30 03:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 697 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9789 KB; 2026-03-30 03:34:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 03:27:47, To:, 2026-03-30 03:34:32, Duration (s):, 405, Events Per Second:, 0.517, Events:, 210, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 209, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27043 2026-03-30 03:34:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s684ms. 2026-03-30 03:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 03:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 870 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9658 KB; 2026-03-30 03:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 878 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9691 KB; 2026-03-30 03:36:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 03:36:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 03:36:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 03:36:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 03:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 879 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 764 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9772 KB; 2026-03-30 03:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 729 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 264 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9934 KB; 2026-03-30 03:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9885 KB; 2026-03-30 03:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 03:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 991 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 672 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9895 KB; 2026-03-30 03:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 82 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9899 KB; 2026-03-30 03:41:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 03:41:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 03:41:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 03:41:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 03:41:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 03:34:33, To:, 2026-03-30 03:41:32, Duration (s):, 419, Events Per Second:, 0.907, Events:, 381, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 380, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48192 2026-03-30 03:41:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s835ms. 2026-03-30 03:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 695 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9768 KB; 2026-03-30 03:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9761 KB; 2026-03-30 03:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9746 KB; 2026-03-30 03:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 03:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9773 KB; 2026-03-30 03:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9780 KB; 2026-03-30 03:46:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 03:46:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 03:46:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 03:46:25 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 03:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1100 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 686 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 165 KB; BaseEvent: 68 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10220 KB; 2026-03-30 03:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1104 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 165 KB; BaseEvent: 70 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10207 KB; 2026-03-30 03:48:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 03:41:32, To:, 2026-03-30 03:48:32, Duration (s):, 420, Events Per Second:, 1.103, Events:, 464, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 57, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 55917 2026-03-30 03:48:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s861ms. 2026-03-30 03:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1028 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; TcpIpConnectionsManager: 307 KB; rules::ProcessConditionsCache: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10097 KB; 2026-03-30 03:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 03:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 238 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9986 KB; 2026-03-30 03:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1039 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 231 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9982 KB; 2026-03-30 03:51:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 03:51:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 03:51:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 03:51:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 03:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1039 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 694 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 228 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10025 KB; 2026-03-30 03:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1039 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 207 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9987 KB; 2026-03-30 03:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1041 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; rules::ProcessConditionsCache: 207 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9991 KB; 2026-03-30 03:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 03:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2385 KB; ProcessInfo: 1045 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; rules::ProcessConditionsCache: 210 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 10006 KB; 2026-03-30 03:55:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 03:48:47, To:, 2026-03-30 03:55:32, Duration (s):, 405, Events Per Second:, 0.266, Events:, 108, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 103, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15496 2026-03-30 03:55:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s702ms. 2026-03-30 03:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 869 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 758 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 263 KB; rules::ProcessConditionsCache: 236 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 9938 KB; 2026-03-30 03:56:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 03:56:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 03:56:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 03:56:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 03:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1025 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 772 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; rules::ProcessConditionsCache: 331 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 261 KB; cloudutils::CloudData: 164 KB; ProcessInfoCommandLineTag: 51 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10324 KB; 2026-03-30 03:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1219 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 762 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 395 KB; CacheEntry: 347 KB; TcpIpConnectionsManager: 302 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 276 KB; cloudutils::CloudData: 165 KB; BaseEvent: 87 KB; ProcessInfoCommandLineTag: 66 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10703 KB; 2026-03-30 03:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1270 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 766 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; TcpIpConnectionsManager: 356 KB; CacheEntry: 347 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 309 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 165 KB; BaseEvent: 97 KB; ProcessInfoCommandLineTag: 67 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10648 KB; 2026-03-30 03:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 03:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 03:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1299 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 769 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; TcpIpConnectionsManager: 341 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 326 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 165 KB; BaseEvent: 110 KB; ProcessInfoCommandLineTag: 69 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10689 KB; 2026-03-30 04:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1314 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; TcpIpConnectionsManager: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 302 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 127 KB; BaseEvent: 119 KB; ProcessInfoCommandLineTag: 68 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10603 KB; 2026-03-30 04:01:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 04:01:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 04:01:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 04:01:26 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 04:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1327 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 745 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; TcpIpConnectionsManager: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 274 KB; cloudutils::CloudData: 165 KB; BaseEvent: 127 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 69 KB; BatchSerializer::EventsQueueTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10542 KB; 2026-03-30 04:02:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 03:55:46, To:, 2026-03-30 04:02:32, Duration (s):, 406, Events Per Second:, 3.266, Events:, 1329, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1224, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 51, Livegrid:, 51, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 151355 2026-03-30 04:02:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s980ms. 2026-03-30 04:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1007 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 741 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; TcpIpConnectionsManager: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 270 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 135 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10098 KB; 2026-03-30 04:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1032 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 747 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; TcpIpConnectionsManager: 328 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 293 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 144 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10175 KB; 2026-03-30 04:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 04:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1039 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 743 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; TcpIpConnectionsManager: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10053 KB; 2026-03-30 04:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1047 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 743 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; TcpIpConnectionsManager: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10018 KB; 2026-03-30 04:06:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 04:06:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 04:06:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 04:06:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 04:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1092 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 770 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; TcpIpConnectionsManager: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 272 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 151 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10245 KB; 2026-03-30 04:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1119 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; TcpIpConnectionsManager: 295 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 289 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 165 KB; BaseEvent: 49 KB; ProcessInfoCommandLineTag: 49 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10319 KB; 2026-03-30 04:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1119 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 289 KB; TcpIpConnectionsManager: 282 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 165 KB; BaseEvent: 49 KB; ProcessInfoCommandLineTag: 49 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10305 KB; 2026-03-30 04:09:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 04:02:32, To:, 2026-03-30 04:09:32, Duration (s):, 420, Events Per Second:, 0.948, Events:, 399, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 398, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51832 2026-03-30 04:09:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s862ms. 2026-03-30 04:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 04:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 289 KB; TcpIpConnectionsManager: 266 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10018 KB; 2026-03-30 04:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 289 KB; TcpIpConnectionsManager: 241 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9997 KB; 2026-03-30 04:11:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 04:11:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 04:11:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 04:11:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 04:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 771 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 289 KB; TcpIpConnectionsManager: 241 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9997 KB; 2026-03-30 04:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1044 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 762 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 301 KB; TcpIpConnectionsManager: 284 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10258 KB; 2026-03-30 04:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1044 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 762 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 347 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 301 KB; TcpIpConnectionsManager: 284 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10258 KB; 2026-03-30 04:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 04:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 1132 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 765 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; TcpIpConnectionsManager: 364 KB; CacheEntry: 347 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 66 KB; BaseEvent: 49 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10308 KB; 2026-03-30 04:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1151 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 747 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 126 KB; ProcessInfoCommandLineTag: 67 KB; BaseEvent: 52 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10324 KB; 2026-03-30 04:16:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 04:16:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 04:16:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 04:16:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 04:16:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 04:08:17, To:, 2026-03-30 04:16:32, Duration (s):, 495, Events Per Second:, 1.287, Events:, 638, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 637, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 84291 2026-03-30 04:16:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s593ms. 2026-03-30 04:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 755 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; TcpIpConnectionsManager: 376 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 157 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10192 KB; 2026-03-30 04:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 741 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 131 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10078 KB; 2026-03-30 04:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 739 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 93 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10017 KB; 2026-03-30 04:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 04:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1070 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 741 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 124 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10071 KB; 2026-03-30 04:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1072 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 742 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10012 KB; 2026-03-30 04:21:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 04:21:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 04:21:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 04:21:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 04:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1072 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 743 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10003 KB; 2026-03-30 04:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1072 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 744 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10005 KB; 2026-03-30 04:23:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 04:16:30, To:, 2026-03-30 04:23:32, Duration (s):, 422, Events Per Second:, 0.437, Events:, 185, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 184, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26048 2026-03-30 04:23:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s175ms. 2026-03-30 04:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 99 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9762 KB; 2026-03-30 04:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 04:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 882 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9801 KB; 2026-03-30 04:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 747 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9831 KB; 2026-03-30 04:26:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 04:26:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 04:26:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 04:26:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 04:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2389 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 734 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9818 KB; 2026-03-30 04:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 735 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 264 KB; TcpIpConnectionsManager: 251 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9991 KB; 2026-03-30 04:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 948 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; TcpIpConnectionsManager: 259 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10016 KB; 2026-03-30 04:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 04:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 110 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9935 KB; 2026-03-30 04:30:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 04:24:30, To:, 2026-03-30 04:30:32, Duration (s):, 362, Events Per Second:, 0.755, Events:, 274, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 237, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 18, Livegrid:, 18, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33720 2026-03-30 04:30:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s371ms. 2026-03-30 04:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 732 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 148 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9952 KB; 2026-03-30 04:31:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 04:31:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 04:31:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 04:31:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 04:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 733 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 148 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9975 KB; 2026-03-30 04:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 735 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 249 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9932 KB; 2026-03-30 04:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 261 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10035 KB; 2026-03-30 04:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 04:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 995 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 736 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 142 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10016 KB; 2026-03-30 04:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1028 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 761 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 161 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10135 KB; 2026-03-30 04:36:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 04:36:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 04:36:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 04:36:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 04:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1028 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 726 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10034 KB; 2026-03-30 04:37:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 04:30:36, To:, 2026-03-30 04:37:32, Duration (s):, 416, Events Per Second:, 0.780, Events:, 325, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 312, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39389 2026-03-30 04:37:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s668ms. 2026-03-30 04:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 724 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 142 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9908 KB; 2026-03-30 04:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 233 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9919 KB; 2026-03-30 04:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 04:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9914 KB; 2026-03-30 04:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9922 KB; 2026-03-30 04:41:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 04:41:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 04:41:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 04:41:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 04:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9912 KB; 2026-03-30 04:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 731 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9914 KB; 2026-03-30 04:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 124 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9936 KB; 2026-03-30 04:44:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 04:37:51, To:, 2026-03-30 04:44:32, Duration (s):, 401, Events Per Second:, 0.510, Events:, 205, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 204, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27486 2026-03-30 04:44:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s685ms. 2026-03-30 04:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 04:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3635 KB; ModuleMetadata: 2390 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 729 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 231 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9931 KB; 2026-03-30 04:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 312 KB; TcpIpConnectionsManager: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 166 KB; BaseEvent: 80 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10315 KB; 2026-03-30 04:46:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 04:46:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 04:46:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 04:46:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 04:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 312 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 166 KB; BaseEvent: 80 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10296 KB; 2026-03-30 04:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 312 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; cloudutils::CloudData: 166 KB; BaseEvent: 80 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10277 KB; 2026-03-30 04:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1044 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 166 KB; BaseEvent: 82 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10232 KB; 2026-03-30 04:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 04:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1044 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 166 KB; BaseEvent: 82 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10237 KB; 2026-03-30 04:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 742 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 166 KB; BaseEvent: 83 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10279 KB; 2026-03-30 04:51:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 04:51:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 04:51:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 04:51:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 04:51:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 04:45:00, To:, 2026-03-30 04:51:32, Duration (s):, 392, Events Per Second:, 1.267, Events:, 498, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 416, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 81, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58822 2026-03-30 04:51:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s511ms. 2026-03-30 04:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 866 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 763 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 10006 KB; 2026-03-30 04:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 869 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 766 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 10014 KB; 2026-03-30 04:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 869 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 768 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10014 KB; 2026-03-30 04:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 04:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 770 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 340 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 261 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10066 KB; 2026-03-30 04:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 750 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10016 KB; 2026-03-30 04:56:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 04:56:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 04:56:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 04:56:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 04:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10001 KB; 2026-03-30 04:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 738 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 320 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10004 KB; 2026-03-30 04:58:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 04:53:17, To:, 2026-03-30 04:58:32, Duration (s):, 315, Events Per Second:, 0.146, Events:, 46, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 45, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8489 2026-03-30 04:58:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s437ms. 2026-03-30 04:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 739 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9968 KB; 2026-03-30 04:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 04:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 04:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 740 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10043 KB; 2026-03-30 05:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10020 KB; 2026-03-30 05:01:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 05:01:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 05:01:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 05:01:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 05:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 723 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10028 KB; 2026-03-30 05:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 724 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10024 KB; 2026-03-30 05:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 335 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10015 KB; 2026-03-30 05:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 05:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 337 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10024 KB; 2026-03-30 05:05:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 04:59:26, To:, 2026-03-30 05:05:32, Duration (s):, 366, Events Per Second:, 0.256, Events:, 94, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 93, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14586 2026-03-30 05:05:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s669ms. 2026-03-30 05:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9975 KB; 2026-03-30 05:06:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 05:06:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 05:06:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 05:06:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 05:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9962 KB; 2026-03-30 05:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9965 KB; 2026-03-30 05:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; rules::ProcessConditionsCache: 340 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9980 KB; 2026-03-30 05:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 05:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 369 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10123 KB; 2026-03-30 05:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 349 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10101 KB; 2026-03-30 05:11:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 05:11:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 05:11:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 05:11:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 05:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 349 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10104 KB; 2026-03-30 05:12:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 05:08:28, To:, 2026-03-30 05:12:32, Duration (s):, 244, Events Per Second:, 0.796, Events:, 195, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 192, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26225 2026-03-30 05:12:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s901ms. 2026-03-30 05:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 882 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 724 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 349 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 10016 KB; 2026-03-30 05:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 882 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 349 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 10010 KB; 2026-03-30 05:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 05:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10026 KB; 2026-03-30 05:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10033 KB; 2026-03-30 05:16:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 05:16:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 05:16:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 05:16:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 05:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 715 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10023 KB; 2026-03-30 05:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10045 KB; 2026-03-30 05:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 738 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10044 KB; 2026-03-30 05:19:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 05:14:44, To:, 2026-03-30 05:19:32, Duration (s):, 288, Events Per Second:, 0.111, Events:, 32, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 31, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6183 2026-03-30 05:19:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s555ms. 2026-03-30 05:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 05:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 863 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 739 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 359 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 10018 KB; 2026-03-30 05:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 739 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 360 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10020 KB; 2026-03-30 05:21:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 05:21:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 05:21:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 05:21:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 05:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 742 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 360 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10024 KB; 2026-03-30 05:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 744 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 360 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10031 KB; 2026-03-30 05:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 745 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 360 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10030 KB; 2026-03-30 05:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 05:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 868 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 766 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 363 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10058 KB; 2026-03-30 05:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 868 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 768 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 365 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10065 KB; 2026-03-30 05:26:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 05:26:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 05:26:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 05:26:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 05:26:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 05:20:09, To:, 2026-03-30 05:26:32, Duration (s):, 383, Events Per Second:, 0.065, Events:, 25, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 24, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 5473 2026-03-30 05:26:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s799ms. 2026-03-30 05:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 755 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 394 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 264 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10071 KB; 2026-03-30 05:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 759 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 396 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 265 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10132 KB; 2026-03-30 05:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 396 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 267 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10137 KB; 2026-03-30 05:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 05:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 866 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 763 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 403 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 268 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10158 KB; 2026-03-30 05:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 866 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 764 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 403 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 269 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10161 KB; 2026-03-30 05:31:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 05:31:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 05:31:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 05:31:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 05:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 866 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 785 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 403 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 270 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10184 KB; 2026-03-30 05:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 866 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 786 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 403 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 272 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10187 KB; 2026-03-30 05:33:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 05:27:52, To:, 2026-03-30 05:33:32, Duration (s):, 340, Events Per Second:, 0.537, Events:, 183, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 18, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 82, Livegrid:, 82, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16584 2026-03-30 05:33:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s589ms. 2026-03-30 05:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 854 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 787 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; rules::ProcessConditionsCache: 403 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 273 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10116 KB; 2026-03-30 05:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 05:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 872 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 789 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 288 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9840 KB; 2026-03-30 05:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 791 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 293 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9851 KB; 2026-03-30 05:36:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 05:36:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 05:36:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 05:36:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 05:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 875 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 736 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 264 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9742 KB; 2026-03-30 05:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 875 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 758 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 266 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9767 KB; 2026-03-30 05:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 759 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 267 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 166 KB; BaseEvent: 58 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9883 KB; 2026-03-30 05:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 05:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 761 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 269 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; BaseEvent: 60 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9890 KB; 2026-03-30 05:40:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 05:33:47, To:, 2026-03-30 05:40:32, Duration (s):, 405, Events Per Second:, 0.850, Events:, 345, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 182, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 81, Livegrid:, 81, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37531 2026-03-30 05:40:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s481ms. 2026-03-30 05:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 762 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 271 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9795 KB; 2026-03-30 05:41:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 05:41:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 05:41:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 05:41:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 05:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 764 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 272 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9796 KB; 2026-03-30 05:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 763 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 274 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9798 KB; 2026-03-30 05:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 763 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 275 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 53 KB; rules::ProcessConditionsCache: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9802 KB; 2026-03-30 05:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 05:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 764 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 269 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9814 KB; 2026-03-30 05:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 766 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 272 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9830 KB; 2026-03-30 05:46:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 05:46:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 05:46:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 05:46:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 05:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 734 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9791 KB; 2026-03-30 05:47:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 05:40:46, To:, 2026-03-30 05:47:32, Duration (s):, 406, Events Per Second:, 0.108, Events:, 44, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 39, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7558 2026-03-30 05:47:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s533ms. 2026-03-30 05:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 738 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 269 KB; TcpIpConnectionsManager: 256 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9884 KB; 2026-03-30 05:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 739 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 302 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 265 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 164 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10051 KB; 2026-03-30 05:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 05:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 302 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9926 KB; 2026-03-30 05:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9916 KB; 2026-03-30 05:51:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 05:51:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 05:51:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 05:51:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 05:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 94 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9972 KB; 2026-03-30 05:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9916 KB; 2026-03-30 05:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 1000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 724 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9910 KB; 2026-03-30 05:54:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 05:47:32, To:, 2026-03-30 05:54:32, Duration (s):, 420, Events Per Second:, 0.848, Events:, 357, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 356, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42852 2026-03-30 05:54:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s547ms. 2026-03-30 05:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 05:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 882 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 64 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9744 KB; 2026-03-30 05:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 223 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 101 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9824 KB; 2026-03-30 05:56:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 05:56:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 05:56:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 05:56:31 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 05:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 714 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 233 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9785 KB; 2026-03-30 05:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9994 KB; 2026-03-30 05:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 272 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9885 KB; 2026-03-30 05:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 05:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 05:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2390 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 418 KB; CacheEntry: 348 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9902 KB; 2026-03-30 06:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 1054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 723 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 231 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10064 KB; 2026-03-30 06:01:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 06:01:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 06:01:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 06:01:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 06:01:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 05:54:36, To:, 2026-03-30 06:01:32, Duration (s):, 416, Events Per Second:, 1.166, Events:, 486, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 451, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 17, Livegrid:, 17, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 59219 2026-03-30 06:01:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s828ms. 2026-03-30 06:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 724 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 127 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9887 KB; 2026-03-30 06:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 743 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 127 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9929 KB; 2026-03-30 06:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 127 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9934 KB; 2026-03-30 06:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 06:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 747 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 129 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9946 KB; 2026-03-30 06:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 1003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 750 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 156 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10001 KB; 2026-03-30 06:06:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 06:06:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 06:06:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 06:06:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 06:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 1003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 132 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9941 KB; 2026-03-30 06:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 1003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 129 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9940 KB; 2026-03-30 06:08:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 06:02:48, To:, 2026-03-30 06:08:32, Duration (s):, 344, Events Per Second:, 0.232, Events:, 80, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 79, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 11752 2026-03-30 06:08:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s958ms. 2026-03-30 06:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 134 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9858 KB; 2026-03-30 06:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 06:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 134 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9848 KB; 2026-03-30 06:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 723 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 141 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9869 KB; 2026-03-30 06:11:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 06:11:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 06:11:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 06:11:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 06:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 743 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 154 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9921 KB; 2026-03-30 06:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 763 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 141 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9939 KB; 2026-03-30 06:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 744 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 143 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9943 KB; 2026-03-30 06:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 06:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 145 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 9959 KB; 2026-03-30 06:15:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 06:08:59, To:, 2026-03-30 06:15:32, Duration (s):, 393, Events Per Second:, 0.543, Events:, 214, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 211, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28505 2026-03-30 06:15:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s062ms. 2026-03-30 06:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 882 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 747 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 144 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9847 KB; 2026-03-30 06:16:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 06:16:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 06:16:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 06:16:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 06:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 754 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 146 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9855 KB; 2026-03-30 06:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 756 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 146 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9848 KB; 2026-03-30 06:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3636 KB; ModuleMetadata: 2398 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 758 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 146 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9850 KB; 2026-03-30 06:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 06:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 249 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10232 KB; 2026-03-30 06:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 153 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10187 KB; 2026-03-30 06:21:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 06:21:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 06:21:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 06:21:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 06:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 745 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10295 KB; 2026-03-30 06:22:32 7967594126c0 Info: Events Statistics, From:, 2026-03-30 06:15:35, To:, 2026-03-30 06:22:32, Duration (s):, 417, Events Per Second:, 0.498, Events:, 208, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 205, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26698 2026-03-30 06:22:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s627ms. 2026-03-30 06:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 745 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10181 KB; 2026-03-30 06:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 154 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10169 KB; 2026-03-30 06:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 06:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10167 KB; 2026-03-30 06:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 748 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 156 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10162 KB; 2026-03-30 06:26:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 06:26:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 06:26:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 06:26:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 06:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10277 KB; 2026-03-30 06:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 158 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10237 KB; 2026-03-30 06:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10245 KB; 2026-03-30 06:29:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 06:22:32, To:, 2026-03-30 06:29:33, Duration (s):, 421, Events Per Second:, 0.356, Events:, 150, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 149, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20595 2026-03-30 06:29:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s473ms. 2026-03-30 06:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 06:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 215 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10125 KB; 2026-03-30 06:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 723 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10115 KB; 2026-03-30 06:31:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 06:31:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 06:31:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 06:31:32 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 06:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 198 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10119 KB; 2026-03-30 06:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 726 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10146 KB; 2026-03-30 06:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 726 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10145 KB; 2026-03-30 06:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 06:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 748 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10174 KB; 2026-03-30 06:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 749 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10168 KB; 2026-03-30 06:36:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 06:30:12, To:, 2026-03-30 06:36:33, Duration (s):, 381, Events Per Second:, 0.129, Events:, 49, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 48, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8443 2026-03-30 06:36:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 06:36:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 06:36:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 06:36:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 06:36:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s606ms. 2026-03-30 06:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10081 KB; 2026-03-30 06:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 859 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 738 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10085 KB; 2026-03-30 06:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 740 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10186 KB; 2026-03-30 06:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 06:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 742 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10186 KB; 2026-03-30 06:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 743 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10189 KB; 2026-03-30 06:41:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 06:41:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 06:41:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 06:41:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 06:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 744 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10189 KB; 2026-03-30 06:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 765 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10211 KB; 2026-03-30 06:43:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 06:38:51, To:, 2026-03-30 06:43:33, Duration (s):, 282, Events Per Second:, 0.535, Events:, 151, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 150, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20962 2026-03-30 06:43:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s859ms. 2026-03-30 06:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 765 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 10126 KB; 2026-03-30 06:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 06:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 767 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 10136 KB; 2026-03-30 06:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 769 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 259 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10226 KB; 2026-03-30 06:46:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 06:46:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 06:46:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 06:46:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 06:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 756 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 261 KB; TcpIpConnectionsManager: 210 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10213 KB; 2026-03-30 06:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 758 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; TcpIpConnectionsManager: 210 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10216 KB; 2026-03-30 06:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 778 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 263 KB; rules::ProcessConditionsCache: 209 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10229 KB; 2026-03-30 06:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 06:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 760 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 263 KB; rules::ProcessConditionsCache: 216 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10228 KB; 2026-03-30 06:50:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 06:43:40, To:, 2026-03-30 06:50:33, Duration (s):, 413, Events Per Second:, 0.324, Events:, 134, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 77, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 22, Livegrid:, 22, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16433 2026-03-30 06:50:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s691ms. 2026-03-30 06:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 763 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 265 KB; rules::ProcessConditionsCache: 216 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 10174 KB; 2026-03-30 06:51:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 06:51:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 06:51:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 06:51:33 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 06:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 744 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 226 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10190 KB; 2026-03-30 06:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 226 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10198 KB; 2026-03-30 06:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 767 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 226 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10218 KB; 2026-03-30 06:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 06:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 768 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::ProcessConditionsCache: 218 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10204 KB; 2026-03-30 06:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 769 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::ProcessConditionsCache: 218 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10207 KB; 2026-03-30 06:56:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 06:56:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 06:56:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 06:56:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 06:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 756 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; rules::ProcessConditionsCache: 218 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10196 KB; 2026-03-30 06:57:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 06:51:30, To:, 2026-03-30 06:57:33, Duration (s):, 363, Events Per Second:, 0.220, Events:, 80, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 79, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12140 2026-03-30 06:57:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s000ms. 2026-03-30 06:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 758 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; rules::ProcessConditionsCache: 218 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 10158 KB; 2026-03-30 06:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 51 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10385 KB; 2026-03-30 06:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 06:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 06:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 1025 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 345 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10521 KB; 2026-03-30 07:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 1025 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 297 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10478 KB; 2026-03-30 07:01:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 07:01:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 07:01:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 07:01:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 07:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3892 KB; ModuleMetadata: 2398 KB; ProcessInfo: 1025 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 726 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 10456 KB; 2026-03-30 07:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 1072 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; rules::ProcessConditionsCache: 411 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13763 KB; 2026-03-30 07:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 1072 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 299 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 165 KB; BaseEvent: 55 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13621 KB; 2026-03-30 07:04:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 06:58:37, To:, 2026-03-30 07:04:33, Duration (s):, 356, Events Per Second:, 1.652, Events:, 588, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 535, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 69709 2026-03-30 07:04:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s403ms. 2026-03-30 07:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 07:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 729 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 298 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13363 KB; 2026-03-30 07:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 906 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 243 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13360 KB; 2026-03-30 07:06:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 07:06:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 07:06:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 07:06:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 07:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13357 KB; 2026-03-30 07:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13363 KB; 2026-03-30 07:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 302 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13440 KB; 2026-03-30 07:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 07:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 309 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13432 KB; 2026-03-30 07:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 985 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 724 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 313 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13450 KB; 2026-03-30 07:11:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 07:04:44, To:, 2026-03-30 07:11:33, Duration (s):, 409, Events Per Second:, 0.531, Events:, 217, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 216, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28880 2026-03-30 07:11:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s679ms. 2026-03-30 07:11:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 07:11:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 07:11:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 07:11:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 07:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 310 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13347 KB; 2026-03-30 07:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 310 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13349 KB; 2026-03-30 07:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 310 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13353 KB; 2026-03-30 07:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 07:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 419 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 313 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13353 KB; 2026-03-30 07:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 313 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13367 KB; 2026-03-30 07:16:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 07:16:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 07:16:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 07:16:34 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 07:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13359 KB; 2026-03-30 07:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13364 KB; 2026-03-30 07:18:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 07:11:33, To:, 2026-03-30 07:18:33, Duration (s):, 420, Events Per Second:, 0.067, Events:, 28, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 27, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 5577 2026-03-30 07:18:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s525ms. 2026-03-30 07:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 261 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13299 KB; 2026-03-30 07:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 07:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 868 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13312 KB; 2026-03-30 07:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 868 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 261 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13311 KB; 2026-03-30 07:21:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 07:21:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 07:21:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 07:21:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 07:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 879 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 328 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13334 KB; 2026-03-30 07:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 879 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13336 KB; 2026-03-30 07:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 879 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13334 KB; 2026-03-30 07:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 07:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 882 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13334 KB; 2026-03-30 07:25:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 07:18:41, To:, 2026-03-30 07:25:33, Duration (s):, 412, Events Per Second:, 0.129, Events:, 53, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 52, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9132 2026-03-30 07:25:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s094ms. 2026-03-30 07:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13306 KB; 2026-03-30 07:26:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 07:26:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 07:26:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 07:26:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 07:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 862 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13296 KB; 2026-03-30 07:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 872 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 264 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13357 KB; 2026-03-30 07:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 890 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 231 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13355 KB; 2026-03-30 07:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 07:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 231 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13362 KB; 2026-03-30 07:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 909 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 353 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 243 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13427 KB; 2026-03-30 07:31:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 07:31:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 07:31:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 07:31:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 07:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13379 KB; 2026-03-30 07:32:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 07:25:46, To:, 2026-03-30 07:32:33, Duration (s):, 407, Events Per Second:, 0.334, Events:, 136, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 135, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19154 2026-03-30 07:32:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s714ms. 2026-03-30 07:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 723 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13336 KB; 2026-03-30 07:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 336 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13343 KB; 2026-03-30 07:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 07:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 342 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13349 KB; 2026-03-30 07:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 358 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13440 KB; 2026-03-30 07:36:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 07:36:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 07:36:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 07:36:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 07:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 715 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 342 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13463 KB; 2026-03-30 07:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 340 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13482 KB; 2026-03-30 07:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 985 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 739 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 345 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13528 KB; 2026-03-30 07:39:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 07:32:52, To:, 2026-03-30 07:39:33, Duration (s):, 401, Events Per Second:, 0.713, Events:, 286, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 283, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36027 2026-03-30 07:39:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s621ms. 2026-03-30 07:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 07:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 741 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13431 KB; 2026-03-30 07:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 743 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13433 KB; 2026-03-30 07:41:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 07:41:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 07:41:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 07:41:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 07:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 743 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13436 KB; 2026-03-30 07:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 746 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 360 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13471 KB; 2026-03-30 07:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13497 KB; 2026-03-30 07:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 07:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2398 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 354 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13506 KB; 2026-03-30 07:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2403 KB; ProcessInfo: 982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13516 KB; 2026-03-30 07:46:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 07:39:52, To:, 2026-03-30 07:46:33, Duration (s):, 401, Events Per Second:, 0.386, Events:, 155, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 154, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21623 2026-03-30 07:46:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s996ms. 2026-03-30 07:46:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 07:46:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 07:46:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 07:46:35 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 07:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2403 KB; ProcessInfo: 888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 354 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13352 KB; 2026-03-30 07:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2403 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 718 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 418 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 233 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13485 KB; 2026-03-30 07:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2403 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 354 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13421 KB; 2026-03-30 07:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 07:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2403 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 361 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13451 KB; 2026-03-30 07:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 725 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 295 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 112 KB; BaseEvent: 67 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13472 KB; 2026-03-30 07:51:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 07:51:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 07:51:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 07:51:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 07:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1079 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 724 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 99 KB; BaseEvent: 76 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13483 KB; 2026-03-30 07:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 723 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 101 KB; BaseEvent: 80 KB; ProcessInfoCommandLineTag: 48 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13514 KB; 2026-03-30 07:53:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 07:47:39, To:, 2026-03-30 07:53:33, Duration (s):, 354, Events Per Second:, 1.570, Events:, 556, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 499, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 56, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 65996 2026-03-30 07:53:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s464ms. 2026-03-30 07:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6964 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13299 KB; 2026-03-30 07:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 07:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1039 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13323 KB; 2026-03-30 07:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1051 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 750 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13363 KB; 2026-03-30 07:56:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 07:56:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 07:56:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 07:56:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 07:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1067 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 715 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13352 KB; 2026-03-30 07:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1075 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 715 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13362 KB; 2026-03-30 07:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1075 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 231 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13353 KB; 2026-03-30 07:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 07:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 07:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1091 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13281 KB; 2026-03-30 08:00:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 07:53:29, To:, 2026-03-30 08:00:33, Duration (s):, 424, Events Per Second:, 0.422, Events:, 179, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 178, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24886 2026-03-30 08:00:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s714ms. 2026-03-30 08:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13254 KB; 2026-03-30 08:01:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 08:01:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 08:01:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 08:01:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 08:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 119 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13150 KB; 2026-03-30 08:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 138 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13204 KB; 2026-03-30 08:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13284 KB; 2026-03-30 08:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 08:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 132 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13224 KB; 2026-03-30 08:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13225 KB; 2026-03-30 08:06:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 08:06:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 08:06:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 08:06:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 08:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 611 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 121 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13222 KB; 2026-03-30 08:07:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 08:00:44, To:, 2026-03-30 08:07:33, Duration (s):, 409, Events Per Second:, 0.750, Events:, 307, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 306, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37520 2026-03-30 08:07:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s679ms. 2026-03-30 08:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 223 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13106 KB; 2026-03-30 08:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13096 KB; 2026-03-30 08:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 08:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13084 KB; 2026-03-30 08:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13084 KB; 2026-03-30 08:11:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 08:11:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 08:11:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 08:11:36 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 08:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13084 KB; 2026-03-30 08:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 143 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13116 KB; 2026-03-30 08:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1011 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 158 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13306 KB; 2026-03-30 08:14:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 08:08:17, To:, 2026-03-30 08:14:33, Duration (s):, 376, Events Per Second:, 0.875, Events:, 329, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 286, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 21, Livegrid:, 21, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40604 2026-03-30 08:14:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s604ms. 2026-03-30 08:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 08:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 995 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 158 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13275 KB; 2026-03-30 08:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 173 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13361 KB; 2026-03-30 08:16:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 08:16:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 08:16:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 08:16:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 08:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1007 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 157 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13292 KB; 2026-03-30 08:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1007 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 155 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13287 KB; 2026-03-30 08:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1017 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 158 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13268 KB; 2026-03-30 08:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 08:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 220 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13297 KB; 2026-03-30 08:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1036 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 225 KB; rules::ProcessConditionsCache: 171 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13322 KB; 2026-03-30 08:21:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 08:14:34, To:, 2026-03-30 08:21:33, Duration (s):, 419, Events Per Second:, 0.425, Events:, 178, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 177, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24250 2026-03-30 08:21:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s678ms. 2026-03-30 08:21:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 08:21:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 08:21:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 08:21:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 08:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 216 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13131 KB; 2026-03-30 08:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 215 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13135 KB; 2026-03-30 08:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 909 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 223 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13136 KB; 2026-03-30 08:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 08:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 233 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13187 KB; 2026-03-30 08:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 243 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13220 KB; 2026-03-30 08:26:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 08:26:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 08:26:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 08:26:37 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 08:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 236 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13223 KB; 2026-03-30 08:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 991 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 259 KB; TcpIpConnectionsManager: 259 KB; cloudutils::CloudData: 165 KB; BaseEvent: 59 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13467 KB; 2026-03-30 08:28:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 08:21:31, To:, 2026-03-30 08:28:33, Duration (s):, 422, Events Per Second:, 0.877, Events:, 370, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 225, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 72, Livegrid:, 72, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44411 2026-03-30 08:28:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s989ms. 2026-03-30 08:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13239 KB; 2026-03-30 08:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 08:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13253 KB; 2026-03-30 08:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13275 KB; 2026-03-30 08:31:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 08:31:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 08:31:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 08:31:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 08:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 225 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13254 KB; 2026-03-30 08:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 221 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13261 KB; 2026-03-30 08:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 225 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13284 KB; 2026-03-30 08:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 08:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 223 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13308 KB; 2026-03-30 08:35:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 08:28:21, To:, 2026-03-30 08:35:33, Duration (s):, 432, Events Per Second:, 0.525, Events:, 227, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 188, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 19, Livegrid:, 19, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32364 2026-03-30 08:35:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s737ms. 2026-03-30 08:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 287 KB; TcpIpConnectionsManager: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13347 KB; 2026-03-30 08:36:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 08:36:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 08:36:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 08:36:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 08:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13236 KB; 2026-03-30 08:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13244 KB; 2026-03-30 08:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1023 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 165 KB; BaseEvent: 69 KB; ProcessInfoCommandLineTag: 65 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13473 KB; 2026-03-30 08:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 08:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 234 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 165 KB; BaseEvent: 75 KB; ProcessInfoCommandLineTag: 65 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13440 KB; 2026-03-30 08:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 233 KB; rules::ProcessConditionsCache: 219 KB; cloudutils::CloudData: 165 KB; BaseEvent: 76 KB; ProcessInfoCommandLineTag: 65 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13460 KB; 2026-03-30 08:41:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 08:41:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 08:41:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 08:41:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 08:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 1034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 219 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 165 KB; BaseEvent: 76 KB; ProcessInfoCommandLineTag: 65 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13450 KB; 2026-03-30 08:42:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 08:35:47, To:, 2026-03-30 08:42:33, Duration (s):, 406, Events Per Second:, 1.332, Events:, 541, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 408, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 66, Livegrid:, 66, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 63459 2026-03-30 08:42:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s851ms. 2026-03-30 08:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 230 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13198 KB; 2026-03-30 08:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 226 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13196 KB; 2026-03-30 08:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 08:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2403 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 278 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; cloudutils::CloudData: 165 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13323 KB; 2026-03-30 08:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 231 KB; rules::ProcessConditionsCache: 223 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13243 KB; 2026-03-30 08:46:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 08:46:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 08:46:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 08:46:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 08:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13284 KB; 2026-03-30 08:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13280 KB; 2026-03-30 08:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 228 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13265 KB; 2026-03-30 08:49:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 08:42:39, To:, 2026-03-30 08:49:33, Duration (s):, 414, Events Per Second:, 0.507, Events:, 210, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 209, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26562 2026-03-30 08:49:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s093ms. 2026-03-30 08:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 08:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 890 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::ProcessConditionsCache: 230 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13159 KB; 2026-03-30 08:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 234 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13182 KB; 2026-03-30 08:51:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 08:51:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 08:51:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 08:51:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 08:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 234 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13189 KB; 2026-03-30 08:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::ProcessConditionsCache: 232 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13189 KB; 2026-03-30 08:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13275 KB; 2026-03-30 08:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 08:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 256 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::ProcessConditionsCache: 237 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13328 KB; 2026-03-30 08:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::ProcessConditionsCache: 239 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13363 KB; 2026-03-30 08:56:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 08:49:57, To:, 2026-03-30 08:56:33, Duration (s):, 396, Events Per Second:, 0.490, Events:, 194, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 191, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25574 2026-03-30 08:56:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s730ms. 2026-03-30 08:56:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 08:56:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 08:56:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 08:56:38 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 08:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 238 KB; rules::ProcessConditionsCache: 235 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13259 KB; 2026-03-30 08:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::ProcessConditionsCache: 235 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13227 KB; 2026-03-30 08:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 235 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13228 KB; 2026-03-30 08:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 08:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 08:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 248 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13266 KB; 2026-03-30 09:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 1011 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13433 KB; 2026-03-30 09:01:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 09:01:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 09:01:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 09:01:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 09:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 1036 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 358 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 261 KB; TcpIpConnectionsManager: 223 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13558 KB; 2026-03-30 09:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 1058 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 321 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13520 KB; 2026-03-30 09:03:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 08:56:37, To:, 2026-03-30 09:03:33, Duration (s):, 416, Events Per Second:, 0.892, Events:, 371, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 362, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46728 2026-03-30 09:03:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s637ms. 2026-03-30 09:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 296 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13377 KB; 2026-03-30 09:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 09:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 298 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13387 KB; 2026-03-30 09:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13353 KB; 2026-03-30 09:06:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 09:06:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 09:06:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 09:06:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 09:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13344 KB; 2026-03-30 09:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13349 KB; 2026-03-30 09:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 302 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13420 KB; 2026-03-30 09:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 09:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 302 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13420 KB; 2026-03-30 09:10:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 09:04:04, To:, 2026-03-30 09:10:33, Duration (s):, 389, Events Per Second:, 0.406, Events:, 158, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 153, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21097 2026-03-30 09:10:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s725ms. 2026-03-30 09:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 310 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13274 KB; 2026-03-30 09:11:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 09:11:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 09:11:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 09:11:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 09:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 310 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13273 KB; 2026-03-30 09:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 310 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13278 KB; 2026-03-30 09:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13285 KB; 2026-03-30 09:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 09:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 374 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 264 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13433 KB; 2026-03-30 09:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 314 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13364 KB; 2026-03-30 09:16:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 09:16:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 09:16:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 09:16:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 09:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; rules::ProcessConditionsCache: 371 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13491 KB; 2026-03-30 09:17:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 09:10:46, To:, 2026-03-30 09:17:33, Duration (s):, 407, Events Per Second:, 0.398, Events:, 162, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 159, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22889 2026-03-30 09:17:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s232ms. 2026-03-30 09:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 948 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 331 KB; TcpIpConnectionsManager: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13400 KB; 2026-03-30 09:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 318 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13416 KB; 2026-03-30 09:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 09:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; rules::ProcessConditionsCache: 322 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 166 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13431 KB; 2026-03-30 09:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 1085 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; cloudutils::CloudData: 166 KB; BaseEvent: 78 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13391 KB; 2026-03-30 09:21:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 09:21:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 09:21:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 09:21:39 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 09:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 1191 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 338 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 265 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 166 KB; BaseEvent: 114 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13750 KB; 2026-03-30 09:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 1195 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 343 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 166 KB; BaseEvent: 119 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13643 KB; 2026-03-30 09:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 1195 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 166 KB; BaseEvent: 119 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13595 KB; 2026-03-30 09:24:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 09:17:32, To:, 2026-03-30 09:24:33, Duration (s):, 421, Events Per Second:, 1.888, Events:, 795, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 680, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 22, Livegrid:, 22, OriginUrl:, 0, Alarms:, 70, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 92873 2026-03-30 09:24:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s848ms. 2026-03-30 09:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 09:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13169 KB; 2026-03-30 09:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13136 KB; 2026-03-30 09:26:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 09:26:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 09:26:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 09:26:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 09:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13146 KB; 2026-03-30 09:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13146 KB; 2026-03-30 09:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13144 KB; 2026-03-30 09:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 09:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2404 KB; ProcessInfo: 985 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 420 KB; CacheEntry: 350 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13174 KB; 2026-03-30 09:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 985 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 117 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13194 KB; 2026-03-30 09:31:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 09:24:37, To:, 2026-03-30 09:31:33, Duration (s):, 416, Events Per Second:, 0.154, Events:, 64, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 51, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10032 2026-03-30 09:31:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s529ms. 2026-03-30 09:31:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 09:31:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 09:31:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 09:31:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 09:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 119 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13067 KB; 2026-03-30 09:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 119 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13069 KB; 2026-03-30 09:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 264 KB; TcpIpConnectionsManager: 226 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13186 KB; 2026-03-30 09:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 09:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13141 KB; 2026-03-30 09:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 243 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13158 KB; 2026-03-30 09:36:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 09:36:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 09:36:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 09:36:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 09:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13191 KB; 2026-03-30 09:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13221 KB; 2026-03-30 09:38:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 09:31:42, To:, 2026-03-30 09:38:33, Duration (s):, 411, Events Per Second:, 0.525, Events:, 216, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 211, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27329 2026-03-30 09:38:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s902ms. 2026-03-30 09:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13348 KB; 2026-03-30 09:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 09:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1098 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 300 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 167 KB; BaseEvent: 76 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13654 KB; 2026-03-30 09:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1101 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 290 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; cloudutils::CloudData: 167 KB; BaseEvent: 78 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13634 KB; 2026-03-30 09:41:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 09:41:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 09:41:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 09:41:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 09:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1123 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 290 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 167 KB; BaseEvent: 83 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13657 KB; 2026-03-30 09:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1123 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 167 KB; BaseEvent: 84 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13614 KB; 2026-03-30 09:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1123 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 167 KB; BaseEvent: 84 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13618 KB; 2026-03-30 09:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 09:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1126 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 167 KB; BaseEvent: 86 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13623 KB; 2026-03-30 09:45:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 09:38:32, To:, 2026-03-30 09:45:33, Duration (s):, 421, Events Per Second:, 1.403, Events:, 591, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 524, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 66, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 71043 2026-03-30 09:45:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s942ms. 2026-03-30 09:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 865 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13251 KB; 2026-03-30 09:46:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 09:46:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 09:46:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 09:46:40 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 09:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 866 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13241 KB; 2026-03-30 09:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 872 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13254 KB; 2026-03-30 09:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 872 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13259 KB; 2026-03-30 09:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 09:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 879 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13259 KB; 2026-03-30 09:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13329 KB; 2026-03-30 09:51:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 09:51:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 09:51:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 09:51:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 09:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13298 KB; 2026-03-30 09:52:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 09:45:37, To:, 2026-03-30 09:52:33, Duration (s):, 416, Events Per Second:, 0.240, Events:, 100, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 99, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14278 2026-03-30 09:52:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s701ms. 2026-03-30 09:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 299 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13282 KB; 2026-03-30 09:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 268 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13326 KB; 2026-03-30 09:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 09:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13200 KB; 2026-03-30 09:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13197 KB; 2026-03-30 09:56:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 09:56:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 09:56:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 09:56:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 09:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13185 KB; 2026-03-30 09:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 682 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 38 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13163 KB; 2026-03-30 09:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 683 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 40 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13186 KB; 2026-03-30 09:59:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 09:52:48, To:, 2026-03-30 09:59:33, Duration (s):, 405, Events Per Second:, 0.610, Events:, 247, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 241, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31227 2026-03-30 09:59:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s715ms. 2026-03-30 09:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 09:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 09:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 685 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13075 KB; 2026-03-30 10:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 686 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 54 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13077 KB; 2026-03-30 10:01:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 10:01:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 10:01:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 10:01:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 10:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 687 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13087 KB; 2026-03-30 10:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 54 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13071 KB; 2026-03-30 10:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 54 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13069 KB; 2026-03-30 10:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 10:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13054 KB; 2026-03-30 10:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13085 KB; 2026-03-30 10:06:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 10:00:00, To:, 2026-03-30 10:06:33, Duration (s):, 393, Events Per Second:, 0.262, Events:, 103, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 102, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15487 2026-03-30 10:06:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s063ms. 2026-03-30 10:06:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 10:06:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 10:06:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 10:06:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 10:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 241 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13082 KB; 2026-03-30 10:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 243 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13104 KB; 2026-03-30 10:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13128 KB; 2026-03-30 10:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 10:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 975 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13216 KB; 2026-03-30 10:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 233 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13240 KB; 2026-03-30 10:11:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 10:11:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 10:11:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 10:11:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 10:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13190 KB; 2026-03-30 10:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13194 KB; 2026-03-30 10:13:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 10:07:00, To:, 2026-03-30 10:13:33, Duration (s):, 393, Events Per Second:, 0.743, Events:, 292, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 291, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36831 2026-03-30 10:13:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s713ms. 2026-03-30 10:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 878 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 74 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13048 KB; 2026-03-30 10:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 10:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 879 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13038 KB; 2026-03-30 10:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 879 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13020 KB; 2026-03-30 10:16:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 10:16:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 10:16:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 10:16:41 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 10:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13016 KB; 2026-03-30 10:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13033 KB; 2026-03-30 10:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13120 KB; 2026-03-30 10:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 10:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13114 KB; 2026-03-30 10:20:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 10:14:17, To:, 2026-03-30 10:20:33, Duration (s):, 376, Events Per Second:, 0.370, Events:, 139, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 138, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18967 2026-03-30 10:20:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s513ms. 2026-03-30 10:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 231 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13096 KB; 2026-03-30 10:21:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 10:21:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 10:21:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 10:21:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 10:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13091 KB; 2026-03-30 10:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13108 KB; 2026-03-30 10:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 994 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; rules::ProcessConditionsCache: 217 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13410 KB; 2026-03-30 10:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 10:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1020 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13418 KB; 2026-03-30 10:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1022 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 307 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13337 KB; 2026-03-30 10:26:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 10:26:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 10:26:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 10:26:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 10:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1022 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13289 KB; 2026-03-30 10:27:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 10:20:47, To:, 2026-03-30 10:27:33, Duration (s):, 406, Events Per Second:, 0.817, Events:, 332, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 323, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40871 2026-03-30 10:27:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s937ms. 2026-03-30 10:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 233 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 94 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13112 KB; 2026-03-30 10:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13165 KB; 2026-03-30 10:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 10:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 966 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13178 KB; 2026-03-30 10:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13198 KB; 2026-03-30 10:31:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 10:31:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 10:31:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 10:31:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 10:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 997 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13251 KB; 2026-03-30 10:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1010 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13258 KB; 2026-03-30 10:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1010 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13258 KB; 2026-03-30 10:34:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 10:28:04, To:, 2026-03-30 10:34:33, Duration (s):, 389, Events Per Second:, 0.642, Events:, 250, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 249, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33197 2026-03-30 10:34:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s131ms. 2026-03-30 10:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 10:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13335 KB; 2026-03-30 10:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13366 KB; 2026-03-30 10:36:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 10:36:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 10:36:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 10:36:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 10:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 292 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13261 KB; 2026-03-30 10:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13244 KB; 2026-03-30 10:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13285 KB; 2026-03-30 10:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 10:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13284 KB; 2026-03-30 10:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13298 KB; 2026-03-30 10:41:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 10:34:30, To:, 2026-03-30 10:41:33, Duration (s):, 423, Events Per Second:, 0.886, Events:, 375, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 374, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48841 2026-03-30 10:41:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s864ms. 2026-03-30 10:41:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 10:41:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 10:41:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 10:41:42 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 10:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 121 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13131 KB; 2026-03-30 10:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 121 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13130 KB; 2026-03-30 10:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 121 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13130 KB; 2026-03-30 10:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 10:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 963 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 156 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13246 KB; 2026-03-30 10:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13243 KB; 2026-03-30 10:46:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 10:46:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 10:46:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 10:46:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 10:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13248 KB; 2026-03-30 10:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13244 KB; 2026-03-30 10:48:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 10:41:25, To:, 2026-03-30 10:48:33, Duration (s):, 428, Events Per Second:, 0.385, Events:, 165, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 164, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21552 2026-03-30 10:48:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s707ms. 2026-03-30 10:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 121 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13072 KB; 2026-03-30 10:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 10:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 127 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13091 KB; 2026-03-30 10:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 129 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13096 KB; 2026-03-30 10:51:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 10:51:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 10:51:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 10:51:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 10:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 129 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13093 KB; 2026-03-30 10:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 127 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13095 KB; 2026-03-30 10:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 266 KB; rules::ProcessConditionsCache: 252 KB; TcpIpConnectionsManager: 251 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13339 KB; 2026-03-30 10:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 10:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 251 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 132 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13201 KB; 2026-03-30 10:55:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 10:48:45, To:, 2026-03-30 10:55:33, Duration (s):, 408, Events Per Second:, 0.363, Events:, 148, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 147, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19850 2026-03-30 10:55:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s107ms. 2026-03-30 10:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 134 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13181 KB; 2026-03-30 10:56:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 10:56:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 10:56:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 10:56:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 10:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 134 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13196 KB; 2026-03-30 10:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 132 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13141 KB; 2026-03-30 10:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 132 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13153 KB; 2026-03-30 10:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 10:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 10:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 944 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 151 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13198 KB; 2026-03-30 11:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 160 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13296 KB; 2026-03-30 11:01:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 11:01:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 11:01:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 11:01:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 11:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 154 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13305 KB; 2026-03-30 11:02:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 10:55:46, To:, 2026-03-30 11:02:33, Duration (s):, 407, Events Per Second:, 0.580, Events:, 236, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 235, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30899 2026-03-30 11:02:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s862ms. 2026-03-30 11:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13229 KB; 2026-03-30 11:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13209 KB; 2026-03-30 11:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 11:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 944 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13201 KB; 2026-03-30 11:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 966 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 162 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13237 KB; 2026-03-30 11:06:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 11:06:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 11:06:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 11:06:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 11:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13277 KB; 2026-03-30 11:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 995 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13274 KB; 2026-03-30 11:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1039 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 153 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13331 KB; 2026-03-30 11:09:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 11:02:33, To:, 2026-03-30 11:09:33, Duration (s):, 420, Events Per Second:, 0.702, Events:, 295, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 294, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37302 2026-03-30 11:09:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s458ms. 2026-03-30 11:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 11:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 945 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 163 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 13183 KB; 2026-03-30 11:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13336 KB; 2026-03-30 11:11:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 11:11:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 11:11:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 11:11:43 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 11:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 994 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 161 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13298 KB; 2026-03-30 11:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1039 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 310 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13484 KB; 2026-03-30 11:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 296 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::ProcessConditionsCache: 229 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13539 KB; 2026-03-30 11:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 11:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1089 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 306 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13532 KB; 2026-03-30 11:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1089 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 274 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 18 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13467 KB; 2026-03-30 11:16:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 11:10:00, To:, 2026-03-30 11:16:33, Duration (s):, 393, Events Per Second:, 1.071, Events:, 421, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 418, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 50860 2026-03-30 11:16:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s842ms. 2026-03-30 11:16:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 11:16:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 11:16:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 11:16:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 11:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 167 KB; rules::ProcessConditionsCache: 165 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13208 KB; 2026-03-30 11:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 242 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13269 KB; 2026-03-30 11:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 995 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 244 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13407 KB; 2026-03-30 11:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 11:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::ProcessConditionsCache: 173 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13347 KB; 2026-03-30 11:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::ProcessConditionsCache: 171 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13342 KB; 2026-03-30 11:21:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 11:21:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 11:21:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 11:21:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 11:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1007 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 237 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13340 KB; 2026-03-30 11:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1011 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 209 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13310 KB; 2026-03-30 11:23:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 11:17:00, To:, 2026-03-30 11:23:33, Duration (s):, 393, Events Per Second:, 0.608, Events:, 239, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 238, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30351 2026-03-30 11:23:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s536ms. 2026-03-30 11:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 868 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 206 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13114 KB; 2026-03-30 11:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 11:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 872 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 207 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13131 KB; 2026-03-30 11:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1010 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 206 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13508 KB; 2026-03-30 11:26:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 11:26:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 11:26:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 11:26:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 11:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1370 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 202 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13894 KB; 2026-03-30 11:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 878 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 206 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13156 KB; 2026-03-30 11:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 242 KB; rules::ProcessConditionsCache: 227 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13253 KB; 2026-03-30 11:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 11:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 240 KB; rules::ProcessConditionsCache: 213 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13275 KB; 2026-03-30 11:30:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 11:24:45, To:, 2026-03-30 11:30:33, Duration (s):, 348, Events Per Second:, 0.612, Events:, 213, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 135, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 36, Livegrid:, 36, OriginUrl:, 0, Alarms:, 4, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26105 2026-03-30 11:30:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s687ms. 2026-03-30 11:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 242 KB; rules::ProcessConditionsCache: 219 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13231 KB; 2026-03-30 11:31:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 11:31:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 11:31:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 11:31:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 11:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 909 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 212 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13197 KB; 2026-03-30 11:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 215 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13206 KB; 2026-03-30 11:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; TcpIpConnectionsManager: 230 KB; rules::ProcessConditionsCache: 217 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13252 KB; 2026-03-30 11:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 11:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 229 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13256 KB; 2026-03-30 11:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 230 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13267 KB; 2026-03-30 11:36:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 11:36:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 11:36:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 11:36:44 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 11:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 215 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13250 KB; 2026-03-30 11:37:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 11:30:58, To:, 2026-03-30 11:37:33, Duration (s):, 395, Events Per Second:, 0.359, Events:, 142, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 137, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21177 2026-03-30 11:37:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s705ms. 2026-03-30 11:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13281 KB; 2026-03-30 11:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 168 KB; BaseEvent: 68 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13384 KB; 2026-03-30 11:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 11:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 168 KB; BaseEvent: 70 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13401 KB; 2026-03-30 11:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::ProcessConditionsCache: 228 KB; TcpIpConnectionsManager: 217 KB; cloudutils::CloudData: 167 KB; BaseEvent: 76 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13387 KB; 2026-03-30 11:41:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 11:41:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 11:41:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 11:41:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 11:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 167 KB; BaseEvent: 83 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13483 KB; 2026-03-30 11:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1051 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 296 KB; TcpIpConnectionsManager: 294 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 167 KB; BaseEvent: 92 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13638 KB; 2026-03-30 11:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1073 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 316 KB; rules::ProcessConditionsCache: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 167 KB; BaseEvent: 98 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13681 KB; 2026-03-30 11:44:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 11:37:31, To:, 2026-03-30 11:44:33, Duration (s):, 422, Events Per Second:, 1.625, Events:, 686, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 499, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 93, Livegrid:, 93, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 79661 2026-03-30 11:44:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s813ms. 2026-03-30 11:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 11:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 312 KB; rules::ProcessConditionsCache: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13439 KB; 2026-03-30 11:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; rules::ProcessConditionsCache: 227 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13370 KB; 2026-03-30 11:46:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 11:46:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 11:46:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 11:46:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 11:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::ProcessConditionsCache: 227 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13354 KB; 2026-03-30 11:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::ProcessConditionsCache: 233 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13343 KB; 2026-03-30 11:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 275 KB; TcpIpConnectionsManager: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13487 KB; 2026-03-30 11:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 11:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1107 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; rules::ProcessConditionsCache: 365 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 279 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchSerializer::EventsQueueTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13743 KB; 2026-03-30 11:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1107 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::ProcessConditionsCache: 249 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13595 KB; 2026-03-30 11:51:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 11:44:33, To:, 2026-03-30 11:51:33, Duration (s):, 420, Events Per Second:, 0.959, Events:, 403, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 402, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 50012 2026-03-30 11:51:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s841ms. 2026-03-30 11:51:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 11:51:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 11:51:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 11:51:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 11:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13346 KB; 2026-03-30 11:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 995 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 295 KB; TcpIpConnectionsManager: 283 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 259 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13466 KB; 2026-03-30 11:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 997 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 242 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13358 KB; 2026-03-30 11:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 11:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::ProcessConditionsCache: 240 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13375 KB; 2026-03-30 11:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::ProcessConditionsCache: 238 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13362 KB; 2026-03-30 11:56:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 11:56:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 11:56:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 11:56:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 11:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::ProcessConditionsCache: 238 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13338 KB; 2026-03-30 11:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 1026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 306 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13459 KB; 2026-03-30 11:58:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 11:51:49, To:, 2026-03-30 11:58:33, Duration (s):, 404, Events Per Second:, 0.445, Events:, 180, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 177, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27116 2026-03-30 11:58:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s385ms. 2026-03-30 11:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 915 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 252 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13285 KB; 2026-03-30 11:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 11:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 11:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2421 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 263 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13347 KB; 2026-03-30 12:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 1032 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 309 KB; TcpIpConnectionsManager: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13531 KB; 2026-03-30 12:01:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 12:01:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 12:01:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 12:01:45 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 12:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 1032 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 309 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13492 KB; 2026-03-30 12:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 1032 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 311 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13484 KB; 2026-03-30 12:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 1035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 314 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 204 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13490 KB; 2026-03-30 12:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 12:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 1056 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 322 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13538 KB; 2026-03-30 12:05:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 11:58:32, To:, 2026-03-30 12:05:33, Duration (s):, 421, Events Per Second:, 1.052, Events:, 443, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 420, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 11, Livegrid:, 11, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 59450 2026-03-30 12:05:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s879ms. 2026-03-30 12:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 310 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13289 KB; 2026-03-30 12:06:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 12:06:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 12:06:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 12:06:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 12:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 310 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13290 KB; 2026-03-30 12:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 312 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 217 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13332 KB; 2026-03-30 12:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 319 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 214 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13406 KB; 2026-03-30 12:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 12:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 323 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 217 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13429 KB; 2026-03-30 12:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13464 KB; 2026-03-30 12:11:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 12:11:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 12:11:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 12:11:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 12:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 334 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13459 KB; 2026-03-30 12:12:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 12:06:15, To:, 2026-03-30 12:12:33, Duration (s):, 378, Events Per Second:, 0.841, Events:, 318, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 187, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 64, Livegrid:, 64, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37051 2026-03-30 12:12:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s696ms. 2026-03-30 12:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 333 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13297 KB; 2026-03-30 12:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 333 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13297 KB; 2026-03-30 12:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 12:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2423 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 333 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 167 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13297 KB; 2026-03-30 12:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 346 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13457 KB; 2026-03-30 12:16:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 12:16:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 12:16:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 12:16:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 12:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 349 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13470 KB; 2026-03-30 12:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 349 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13457 KB; 2026-03-30 12:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 349 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13441 KB; 2026-03-30 12:19:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 12:10:59, To:, 2026-03-30 12:19:33, Duration (s):, 514, Events Per Second:, 0.224, Events:, 115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 112, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16062 2026-03-30 12:19:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s682ms. 2026-03-30 12:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 12:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 356 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 13385 KB; 2026-03-30 12:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 356 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13377 KB; 2026-03-30 12:21:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 12:21:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 12:21:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 12:21:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 12:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 358 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13385 KB; 2026-03-30 12:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13220 KB; 2026-03-30 12:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13165 KB; 2026-03-30 12:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 12:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13184 KB; 2026-03-30 12:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13151 KB; 2026-03-30 12:26:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 12:19:21, To:, 2026-03-30 12:26:33, Duration (s):, 432, Events Per Second:, 0.442, Events:, 191, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 190, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25025 2026-03-30 12:26:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s661ms. 2026-03-30 12:26:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 12:26:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 12:26:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 12:26:46 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 12:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; TcpIpConnectionsManager: 255 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 110 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13249 KB; 2026-03-30 12:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13149 KB; 2026-03-30 12:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13152 KB; 2026-03-30 12:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 12:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2465 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13155 KB; 2026-03-30 12:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2467 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13135 KB; 2026-03-30 12:31:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 12:31:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 12:31:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 12:31:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 12:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2467 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13156 KB; 2026-03-30 12:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6980 KB; ModuleMetadata: 2467 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 48 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 13171 KB; 2026-03-30 12:33:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 12:26:45, To:, 2026-03-30 12:33:33, Duration (s):, 408, Events Per Second:, 0.480, Events:, 196, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 195, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25509 2026-03-30 12:33:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s700ms. 2026-03-30 12:33:52 7967437ff6c0 Persistent: Downloading of exclusions v9194-v9195 2026-03-30 12:33:54 7967437ff6c0 Persistent: Current active exclusions (9195): 1:709;10:515,3970;100:1250;101:461;102:556,1136,1142,1148,1171;103:1134;104:524,527,530;105:1157;106:1191;107:461;108:226,1238;109:524,526,527,531,532,533;11:400;110:1252;111:461;112:1158;113:400;114:990;115:328;116:16,587,860;117:7,10;118:661,662,666,667,669,670,674,675,676,678,683,691,746,757,2712,2714;119:926;12:400;120:11,13;121:390,4432;122:461;123:400;124:262;125:11;126:390,4432;127:7;128:9;129:728,729;13:400;130:950;131:772,773,774;132:424;133:400;134:11;135:461;136:461;137:461;138:483;139:1238;14:1278;140:1278;141:990;142:871;143:535,645,872;144:454;145:461;146:374,935;147:400;148:400;149:728,729;15:1156;150:424;151:185,465,466,467,1127,1171,1238,1277;152:400;153:456,1054,1158,1238;154:461;155:802;156:872;157:390,4432;158:1278;159:11;16:400;160:400;161:11,13;162:535;163:9;164:461;165:1163;166:45,191,200,1045,1093,1156,1157,1158,1231,1238,1239,1249,1277;167:1250;168:1191;169:461;17:461;170:728,729;171:424;172:661,662,667,669,674,675,676,678,680,683,691,738,746,757,769,770;173:461;174:1234;175:863;176:461;177:461;178:555;179:999;18:461;180:390,4432;182:86,272,524,527,555,556,572,574,644,645,1042,1043,1116,1158,1160;183:993;185:400;186:871;187:402;188:1198,1200;189:424;19:456;190:1269;191:1250;192:523,524,527,556;193:389,527,645,2515;194:390,566,4432;195:573;196:570;197:317;198:555,556;199:185,197;2:389,527,645,2515;20:390,4432;200:1687;201:570;202:19;203:1127;204:586;205:958;206:38,67,185,194,197,203,312,574,1045,1122;207:529;208:532;209:1018;21:249,1045,1156,1238;210:454,455,456,524,526,531,532,533,555,556,560,4389;211:645;212:356,527,530,1132;213:11,13,45,117,185,191,249,382,556,637,1127,3085,4430;214:19,67,200,400,420,523,524,527,556,958,1092,1122,1658;215:19;216:1687;217:644;218:487,904,1160,1161;219:1,10,67,83,86,200,524,527,555,560,588,645,1122,1142,1149,1193,1686,1687,3913,4171;22:400;220:12,19,400,555,863;221:1628;222:523,524,527,556;223:1156;224:2520;225:1686;226:272,382,1136,1149,1156,1191,4430;227:467,1127,1142,1149,1156,1249;228:1687;229:523,525,526,527,529,531;23:607;230:645;231:580;232:2515;233:526;235:1686;236:580;237:488,576;238:523;239:556;24:522,523,524,526,527,531,532,533,534;240:1628;241:555,556,1342;242:523,525,526,529,531,532,533,534;243:560;244:805,806,807,808,809,810,811,812;245:570,572;246:329;247:530;248:1628;249:2580;25:558;251:556;252:556;253:523,526,530;254:572;255:1156;256:529;258:356;259:1119;26:1191;260:272;261:390;263:515;265:2663;266:526,531;267:272,556,587;268:2712,2714,2715;27:572;271:2118;272:390;273:390;274:390;275:456,2970;276:13;277:2662;279:2136;28:487;280:456,531,2970,3647,3913,4171,4471;281:580;282:580;284:580;285:390;286:572,1156;287:10,114,334,524,572,1045;288:556;289:572,574,1127,1194;29:454;290:556,3729;291:67,1045,1122,1126,1127,1156;292:390;293:390;294:390;295:390;296:390;297:390;299:390;3:461;30:461;300:390;301:375;304:390;305:3085;306:3085;307:88;308:574,1045,1157;309:3085;31:555;312:390;313:390;314:390;315:390;316:390,4432;317:390,4432;318:390,4432;319:390,4432;32:556;320:390,4432;321:3189;322:3189;324:6,414;325:3642;326:535;327:535;328:1687,3312;329:506,3361,3966;330:1687,3312;331:3361;332:535;333:535;334:239;335:535;336:580,587;337:535;338:3694;339:662,680,704,1198,1210,1214,1215,1216,1217,3429,3430,3653,3715,3716,3755;34:461;340:3651;341:3651;342:323;343:2120;344:566,572,1105;345:1084;346:29;347:272,523,996;348:594;349:594;35:555,556;354:645;355:565;36:401;361:461;364:565;37:1056;378:646;379:554;38:400;39:1278;4:961;40:1134;41:461;42:975;43:461;434:565;435:565;436:565;438:542;439:109;44:316;440:61;441:644;442:461;445:1629;446:565;447:565;448:3198;449:3194;45:555,560;450:3194,3199;451:3195;452:3194;453:3194,3196;454:3194;455:3194,3235;456:3235;457:3240;458:3239;459:7;46:1278;460:7;461:7;462:527;463:1629;464:7;465:3972;466:78;467:12,524,527,555,868;468:574,1045,1156,3914;469:221;47:555,556,646,1136,1156,1158,1192,1231;470:565;471:1629;474:506;475:506;476:506;477:506;478:7;479:7;48:1278;480:383,1158,1277;481:2555;482:7;483:1157,1158,1249;484:1157,1158,1249;485:1157;49:527,530;5:390,4432;50:461;51:13,975;52:805,806,807,808,809,810,811,812;53:872;54:400;55:527;57:555;58:555,1156;59:1235;6:461;60:524,527;61:185,194,249,574,992,1045,1116,1127,1149,1156,1158,1277,3078;62:1157,1163,3607;63:954;64:1134;65:461;66:1278;67:390,4432;68:461;69:25;7:527,530;70:923;71:7;72:15,16;73:13,32,38,86,249,574,645,1018,1156,1157,1158,1196,3085;74:10;75:461;76:28;77:11,13,43,86,185,192,194,197,334,383,574,580,645,1045,1127,1149;78:283,485,1122,1127,1149,1231,1277;79:400;8:556;80:10,148,871,967,1045,1122,1127,1156,1157,1158,1238,1277;81:461;82:483;83:9;84:11;85:461;86:461;87:529,530;88:461;89:1250;9:555;90:662;91:1053;92:1157;93:411;94:644,646,1194;95:291;96:926;97:38,39,40,67,3913,4171;98:461;99:586 2026-03-30 12:33:55 7967437ff6c0 Error: Failed parsing stored rule 4548/1122 2026-03-30 12:33:55 7967437ff6c0 Error: Failed parsing stored rule 4550/1127 2026-03-30 12:33:55 7967437ff6c0 Error: Failed parsing stored rule 4571/1162 2026-03-30 12:33:58 7967437ff6c0 Error: Failed parsing stored rule 4525/3183 2026-03-30 12:33:59 7967437ff6c0 Error: Failed parsing stored rule 4523/4523 2026-03-30 12:33:59 7967437ff6c0 Error: Failed parsing stored rule 4524/4524 2026-03-30 12:33:59 7967437ff6c0 Error: Failed parsing stored rule 4527/4527 2026-03-30 12:33:59 7967437ff6c0 Error: Failed parsing stored rule 4528/4528 2026-03-30 12:33:59 7967437ff6c0 Error: Failed parsing stored rule 4529/4529 2026-03-30 12:33:59 7967437ff6c0 Error: Failed parsing stored rule 4530/4530 2026-03-30 12:34:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; rules::RuleEvaluationCtx: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6092 KB; 2026-03-30 12:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 12:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:35:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 101 KB; ProcessInfoCommandLineTag: 46 KB; rules::RuleEvaluationCtx: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6357 KB; 2026-03-30 12:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 944 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 268 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 45 KB; rules::RuleEvaluationCtx: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6313 KB; 2026-03-30 12:36:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 12:36:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 12:36:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 12:36:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 12:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 944 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 700 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 45 KB; rules::RuleEvaluationCtx: 31 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6300 KB; 2026-03-30 12:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 689 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 45 KB; rules::RuleEvaluationCtx: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6420 KB; 2026-03-30 12:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1076 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 281 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 88 KB; ProcessInfoCommandLineTag: 65 KB; BaseEvent: 45 KB; rules::RuleEvaluationCtx: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6518 KB; 2026-03-30 12:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 12:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1104 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 291 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 101 KB; ProcessInfoCommandLineTag: 66 KB; BaseEvent: 51 KB; rules::RuleEvaluationCtx: 34 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6579 KB; 2026-03-30 12:40:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 12:33:35, To:, 2026-03-30 12:40:33, Duration (s):, 418, Events Per Second:, 0.012, Events:, 5, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 4, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 2195 2026-03-30 12:40:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 12:34:13, To:, 2026-03-30 12:40:32, Duration (s):, 379, Events Per Second:, 1.509, Events:, 572, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 571, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 71617 2026-03-30 12:40:33 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s497ms. 2026-03-30 12:40:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s186ms. 2026-03-30 12:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; TcpIpConnectionsManager: 360 KB; CacheEntry: 359 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 277 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 66 KB; rules::RuleEvaluationCtx: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 18 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6770 KB; 2026-03-30 12:41:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 12:41:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 12:41:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 12:41:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 12:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 322 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 83 KB; ProcessInfoCommandLineTag: 66 KB; rules::RuleEvaluationCtx: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6566 KB; 2026-03-30 12:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1129 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 66 KB; rules::RuleEvaluationCtx: 62 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6639 KB; 2026-03-30 12:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1129 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 66 KB; rules::RuleEvaluationCtx: 62 KB; rules::ProcessConditionsCache: 48 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6552 KB; 2026-03-30 12:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 12:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1154 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 66 KB; rules::RuleEvaluationCtx: 62 KB; rules::ProcessConditionsCache: 52 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6577 KB; 2026-03-30 12:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1182 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 170 KB; ProcessInfoCommandLineTag: 66 KB; rules::RuleEvaluationCtx: 62 KB; rules::ProcessConditionsCache: 54 KB; BaseEvent: 50 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6616 KB; 2026-03-30 12:46:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 12:46:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 12:46:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 12:46:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 12:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1204 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 66 KB; rules::RuleEvaluationCtx: 62 KB; BaseEvent: 55 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6687 KB; 2026-03-30 12:47:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 12:40:33, To:, 2026-03-30 12:47:33, Duration (s):, 420, Events Per Second:, 1.190, Events:, 500, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 499, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 61590 2026-03-30 12:47:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s799ms. 2026-03-30 12:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 62 KB; rules::ProcessConditionsCache: 51 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6248 KB; 2026-03-30 12:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1009 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 304 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 265 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 62 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6572 KB; 2026-03-30 12:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 12:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1013 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 294 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 89 KB; rules::RuleEvaluationCtx: 62 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6439 KB; 2026-03-30 12:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1229 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; TcpIpConnectionsManager: 385 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 170 KB; BaseEvent: 130 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7056 KB; 2026-03-30 12:51:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 12:51:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 12:51:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 12:51:47 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 12:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1229 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; TcpIpConnectionsManager: 368 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 170 KB; BaseEvent: 131 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7046 KB; 2026-03-30 12:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1263 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; TcpIpConnectionsManager: 357 KB; rules::ProcessConditionsCache: 297 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 170 KB; BaseEvent: 141 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 47 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7120 KB; 2026-03-30 12:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 1285 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 291 KB; TcpIpConnectionsManager: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 170 KB; BaseEvent: 146 KB; rules::RuleEvaluationCtx: 67 KB; BatchSerializer::EventsQueueTag: 47 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7037 KB; 2026-03-30 12:54:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 12:47:32, To:, 2026-03-30 12:54:33, Duration (s):, 421, Events Per Second:, 2.283, Events:, 962, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 831, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 20, Livegrid:, 20, OriginUrl:, 0, Alarms:, 90, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 110936 2026-03-30 12:54:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s589ms. 2026-03-30 12:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 12:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 299 KB; TcpIpConnectionsManager: 273 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6568 KB; 2026-03-30 12:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 266 KB; TcpIpConnectionsManager: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6504 KB; 2026-03-30 12:56:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 12:56:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 12:56:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 12:56:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 12:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 269 KB; TcpIpConnectionsManager: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6521 KB; 2026-03-30 12:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6483 KB; 2026-03-30 12:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6467 KB; 2026-03-30 12:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 12:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 12:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:00:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6490 KB; 2026-03-30 13:01:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 277 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6493 KB; 2026-03-30 13:01:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 12:54:20, To:, 2026-03-30 13:01:33, Duration (s):, 433, Events Per Second:, 0.367, Events:, 159, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 158, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23499 2026-03-30 13:01:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s121ms. 2026-03-30 13:01:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 13:01:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 13:01:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 13:01:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 13:02:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 878 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6375 KB; 2026-03-30 13:03:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 281 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6395 KB; 2026-03-30 13:04:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 279 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6396 KB; 2026-03-30 13:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 13:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:05:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 281 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6408 KB; 2026-03-30 13:06:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 303 KB; TcpIpConnectionsManager: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6536 KB; 2026-03-30 13:06:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 13:06:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 13:06:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 13:06:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 13:07:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 283 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6516 KB; 2026-03-30 13:08:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 281 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6501 KB; 2026-03-30 13:08:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 13:02:41, To:, 2026-03-30 13:08:33, Duration (s):, 352, Events Per Second:, 0.471, Events:, 166, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 165, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21460 2026-03-30 13:08:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s758ms. 2026-03-30 13:09:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 284 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 209 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6475 KB; 2026-03-30 13:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 13:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:10:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 963 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6497 KB; 2026-03-30 13:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6507 KB; 2026-03-30 13:11:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 13:11:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 13:11:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 13:11:48 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 13:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 295 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6556 KB; 2026-03-30 13:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 991 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 295 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6560 KB; 2026-03-30 13:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 991 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 295 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6565 KB; 2026-03-30 13:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 13:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2467 KB; ProcessInfo: 995 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 359 KB; rules::ProcessConditionsCache: 299 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6555 KB; 2026-03-30 13:15:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 13:09:00, To:, 2026-03-30 13:15:33, Duration (s):, 393, Events Per Second:, 0.615, Events:, 242, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 241, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32731 2026-03-30 13:15:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s478ms. 2026-03-30 13:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 301 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6443 KB; 2026-03-30 13:16:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 13:16:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 13:16:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 13:16:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 13:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 301 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6453 KB; 2026-03-30 13:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 305 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6456 KB; 2026-03-30 13:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 303 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 204 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6434 KB; 2026-03-30 13:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 13:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 301 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6431 KB; 2026-03-30 13:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 307 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6446 KB; 2026-03-30 13:21:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 13:21:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 13:21:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 13:21:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 13:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 309 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6507 KB; 2026-03-30 13:22:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 13:15:33, To:, 2026-03-30 13:22:33, Duration (s):, 420, Events Per Second:, 0.264, Events:, 111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 110, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16995 2026-03-30 13:22:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s733ms. 2026-03-30 13:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6627 KB; 2026-03-30 13:24:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6632 KB; 2026-03-30 13:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 13:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:25:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 359 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6632 KB; 2026-03-30 13:26:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 359 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6634 KB; 2026-03-30 13:26:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 13:26:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 13:26:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 13:26:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 13:27:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 991 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 376 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 224 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6716 KB; 2026-03-30 13:28:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1014 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 359 KB; TcpIpConnectionsManager: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 52 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6712 KB; 2026-03-30 13:29:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1017 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 687 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 361 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 51 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6760 KB; 2026-03-30 13:29:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 13:23:09, To:, 2026-03-30 13:29:33, Duration (s):, 384, Events Per Second:, 0.983, Events:, 378, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 355, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 11, Livegrid:, 11, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46186 2026-03-30 13:29:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s913ms. 2026-03-30 13:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 13:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:30:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 369 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6611 KB; 2026-03-30 13:31:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 690 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 369 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 217 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6608 KB; 2026-03-30 13:31:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 13:31:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 13:31:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 13:31:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 13:32:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 692 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 369 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 217 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6615 KB; 2026-03-30 13:33:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 694 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 373 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 204 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6611 KB; 2026-03-30 13:34:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 694 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 373 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6611 KB; 2026-03-30 13:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 13:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:35:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 697 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 375 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6623 KB; 2026-03-30 13:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 699 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 375 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6627 KB; 2026-03-30 13:36:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 13:29:33, To:, 2026-03-30 13:36:33, Duration (s):, 420, Events Per Second:, 0.164, Events:, 69, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 68, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 11467 2026-03-30 13:36:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s761ms. 2026-03-30 13:36:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 13:36:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 13:36:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 13:36:49 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 13:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 870 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 700 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 375 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6544 KB; 2026-03-30 13:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 878 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 688 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 386 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6566 KB; 2026-03-30 13:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 382 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6610 KB; 2026-03-30 13:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 13:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 388 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6629 KB; 2026-03-30 13:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 694 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 388 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6647 KB; 2026-03-30 13:41:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 13:41:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 13:41:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 13:41:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 13:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 696 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 388 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6647 KB; 2026-03-30 13:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 697 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; rules::ProcessConditionsCache: 391 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6657 KB; 2026-03-30 13:43:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 13:37:22, To:, 2026-03-30 13:43:33, Duration (s):, 371, Events Per Second:, 0.463, Events:, 172, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 171, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23493 2026-03-30 13:43:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s693ms. 2026-03-30 13:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 890 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 698 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 270 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6288 KB; 2026-03-30 13:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 13:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6263 KB; 2026-03-30 13:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6260 KB; 2026-03-30 13:46:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 13:46:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 13:46:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 13:46:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 13:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 73 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6259 KB; 2026-03-30 13:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 263 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 150 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6508 KB; 2026-03-30 13:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 33 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6368 KB; 2026-03-30 13:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 13:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; rules::ProcessConditionsCache: 48 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6412 KB; 2026-03-30 13:50:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 13:43:41, To:, 2026-03-30 13:50:33, Duration (s):, 412, Events Per Second:, 0.761, Events:, 314, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 311, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38606 2026-03-30 13:50:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s710ms. 2026-03-30 13:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 304 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; BaseEvent: 58 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6717 KB; 2026-03-30 13:51:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 13:51:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 13:51:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 13:51:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 13:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; BaseEvent: 62 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6680 KB; 2026-03-30 13:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1063 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 193 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; BaseEvent: 66 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6715 KB; 2026-03-30 13:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1063 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 214 KB; rules::ProcessConditionsCache: 184 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; BaseEvent: 66 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6638 KB; 2026-03-30 13:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 13:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1089 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; rules::ProcessConditionsCache: 243 KB; TcpIpConnectionsManager: 240 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; BaseEvent: 70 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6765 KB; 2026-03-30 13:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1091 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 230 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; BaseEvent: 73 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6698 KB; 2026-03-30 13:56:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 13:56:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 13:56:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 13:56:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 13:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1091 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 227 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; BaseEvent: 74 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6698 KB; 2026-03-30 13:57:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 13:50:45, To:, 2026-03-30 13:57:33, Duration (s):, 408, Events Per Second:, 1.129, Events:, 461, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 397, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 57, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 55912 2026-03-30 13:57:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s880ms. 2026-03-30 13:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 247 KB; rules::ProcessConditionsCache: 226 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6482 KB; 2026-03-30 13:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 230 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6424 KB; 2026-03-30 13:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 13:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 13:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:00:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 230 KB; rules::ProcessConditionsCache: 200 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6465 KB; 2026-03-30 14:01:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::ProcessConditionsCache: 235 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6540 KB; 2026-03-30 14:01:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 14:01:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 14:01:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 14:01:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 14:02:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 219 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6589 KB; 2026-03-30 14:03:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 211 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6570 KB; 2026-03-30 14:04:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 211 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6622 KB; 2026-03-30 14:04:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 13:57:27, To:, 2026-03-30 14:04:33, Duration (s):, 426, Events Per Second:, 0.577, Events:, 246, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 245, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31986 2026-03-30 14:04:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s520ms. 2026-03-30 14:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 14:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:05:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 234 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6470 KB; 2026-03-30 14:06:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 274 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6590 KB; 2026-03-30 14:06:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 14:06:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 14:06:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 14:06:50 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 14:07:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; rules::ProcessConditionsCache: 222 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6552 KB; 2026-03-30 14:08:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 268 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6563 KB; 2026-03-30 14:09:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 291 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; rules::ProcessConditionsCache: 213 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6701 KB; 2026-03-30 14:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 14:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:10:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1061 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6675 KB; 2026-03-30 14:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1091 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; rules::ProcessConditionsCache: 219 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 48 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6726 KB; 2026-03-30 14:11:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 14:04:29, To:, 2026-03-30 14:11:33, Duration (s):, 424, Events Per Second:, 1.157, Events:, 491, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 490, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 60295 2026-03-30 14:11:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s874ms. 2026-03-30 14:11:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 14:11:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 14:11:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 14:11:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 14:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 997 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6567 KB; 2026-03-30 14:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 997 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6575 KB; 2026-03-30 14:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 997 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 232 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6553 KB; 2026-03-30 14:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 14:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1023 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; TcpIpConnectionsManager: 232 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6594 KB; 2026-03-30 14:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 263 KB; rules::ProcessConditionsCache: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6703 KB; 2026-03-30 14:16:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 14:16:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 14:16:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 14:16:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 14:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1060 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; rules::ProcessConditionsCache: 222 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6681 KB; 2026-03-30 14:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1105 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 310 KB; TcpIpConnectionsManager: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6852 KB; 2026-03-30 14:18:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 14:11:33, To:, 2026-03-30 14:18:33, Duration (s):, 420, Events Per Second:, 0.813, Events:, 342, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 341, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43202 2026-03-30 14:18:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s541ms. 2026-03-30 14:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; rules::ProcessConditionsCache: 222 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6508 KB; 2026-03-30 14:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 14:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6538 KB; 2026-03-30 14:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 234 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6526 KB; 2026-03-30 14:21:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 14:21:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 14:21:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 14:21:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 14:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::ProcessConditionsCache: 237 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6568 KB; 2026-03-30 14:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 237 KB; rules::ProcessConditionsCache: 226 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6559 KB; 2026-03-30 14:24:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1009 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; rules::ProcessConditionsCache: 226 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6606 KB; 2026-03-30 14:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 14:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:25:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1023 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 242 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 230 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6620 KB; 2026-03-30 14:25:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 14:18:33, To:, 2026-03-30 14:25:33, Duration (s):, 420, Events Per Second:, 0.547, Events:, 230, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 229, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31731 2026-03-30 14:25:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s691ms. 2026-03-30 14:26:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 295 KB; TcpIpConnectionsManager: 275 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6604 KB; 2026-03-30 14:26:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 14:26:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 14:26:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 14:26:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 14:27:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6517 KB; 2026-03-30 14:28:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 963 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 297 KB; TcpIpConnectionsManager: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6624 KB; 2026-03-30 14:29:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::ProcessConditionsCache: 244 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6589 KB; 2026-03-30 14:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 14:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:30:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 985 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6588 KB; 2026-03-30 14:31:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1013 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 275 KB; rules::ProcessConditionsCache: 240 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6643 KB; 2026-03-30 14:31:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 14:31:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 14:31:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 14:31:51 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 14:32:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1014 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 240 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6624 KB; 2026-03-30 14:32:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 14:25:46, To:, 2026-03-30 14:32:33, Duration (s):, 407, Events Per Second:, 0.771, Events:, 314, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 313, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39770 2026-03-30 14:32:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s752ms. 2026-03-30 14:33:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 240 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6522 KB; 2026-03-30 14:34:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 238 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 129 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6492 KB; 2026-03-30 14:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 14:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:35:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::ProcessConditionsCache: 244 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6517 KB; 2026-03-30 14:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::ProcessConditionsCache: 244 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6512 KB; 2026-03-30 14:36:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 14:36:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 14:36:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 14:36:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 14:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::ProcessConditionsCache: 244 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6499 KB; 2026-03-30 14:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::ProcessConditionsCache: 242 KB; TcpIpConnectionsManager: 217 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6490 KB; 2026-03-30 14:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 249 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6573 KB; 2026-03-30 14:39:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 14:32:29, To:, 2026-03-30 14:39:33, Duration (s):, 424, Events Per Second:, 0.471, Events:, 200, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 199, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26810 2026-03-30 14:39:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s767ms. 2026-03-30 14:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 14:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 268 KB; TcpIpConnectionsManager: 248 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 18 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6739 KB; 2026-03-30 14:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 312 KB; TcpIpConnectionsManager: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6702 KB; 2026-03-30 14:41:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 14:41:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 14:41:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 14:41:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 14:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 714 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 268 KB; rules::ProcessConditionsCache: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6710 KB; 2026-03-30 14:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 262 KB; rules::ProcessConditionsCache: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6707 KB; 2026-03-30 14:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6672 KB; 2026-03-30 14:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 14:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6677 KB; 2026-03-30 14:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6680 KB; 2026-03-30 14:46:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 14:39:35, To:, 2026-03-30 14:46:33, Duration (s):, 418, Events Per Second:, 0.564, Events:, 236, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 230, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32588 2026-03-30 14:46:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s681ms. 2026-03-30 14:46:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 14:46:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 14:46:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 14:46:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 14:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6493 KB; 2026-03-30 14:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 269 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6522 KB; 2026-03-30 14:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 916 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 263 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6518 KB; 2026-03-30 14:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 14:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6587 KB; 2026-03-30 14:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1019 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 346 KB; TcpIpConnectionsManager: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; BaseEvent: 50 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6768 KB; 2026-03-30 14:51:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 14:51:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 14:51:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 14:51:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 14:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1019 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; rules::ProcessConditionsCache: 346 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; BaseEvent: 50 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6769 KB; 2026-03-30 14:52:49 7967327fc6c0 Error: Error while sending control request to server at "eu01.agent.edr.eset.systems:8093", certificate was set to: /CN=Agent=c771dbf0-85fb-4c94-8961-6227fa858111. getReply: End of file [asio.misc:2] 2026-03-30 14:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 104 KB; BaseEvent: 57 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6657 KB; 2026-03-30 14:53:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 14:46:34, To:, 2026-03-30 14:53:33, Duration (s):, 419, Events Per Second:, 1.101, Events:, 462, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 425, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 60196 2026-03-30 14:53:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s492ms. 2026-03-30 14:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6343 KB; 2026-03-30 14:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 14:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 985 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6355 KB; 2026-03-30 14:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6341 KB; 2026-03-30 14:56:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 14:56:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 14:56:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 14:56:52 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 14:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1010 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6367 KB; 2026-03-30 14:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1036 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 50 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6437 KB; 2026-03-30 14:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1041 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6447 KB; 2026-03-30 14:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 14:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 14:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:00:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2468 KB; ProcessInfo: 1064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 429 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6512 KB; 2026-03-30 15:00:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 14:53:33, To:, 2026-03-30 15:00:33, Duration (s):, 420, Events Per Second:, 0.599, Events:, 252, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 249, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35845 2026-03-30 15:00:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s003ms. 2026-03-30 15:01:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6462 KB; 2026-03-30 15:01:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 15:01:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 15:01:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 15:01:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 15:02:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 1000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6463 KB; 2026-03-30 15:03:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 1025 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 144 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6522 KB; 2026-03-30 15:04:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 1025 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6487 KB; 2026-03-30 15:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 15:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:05:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 1039 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 133 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6548 KB; 2026-03-30 15:06:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 1039 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6519 KB; 2026-03-30 15:06:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 15:06:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 15:06:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 15:06:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 15:07:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 1041 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 214 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6505 KB; 2026-03-30 15:07:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 15:00:33, To:, 2026-03-30 15:07:33, Duration (s):, 420, Events Per Second:, 0.740, Events:, 311, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 310, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39748 2026-03-30 15:07:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s279ms. 2026-03-30 15:08:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 214 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6286 KB; 2026-03-30 15:09:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6342 KB; 2026-03-30 15:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 15:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:10:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6367 KB; 2026-03-30 15:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6365 KB; 2026-03-30 15:11:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 15:11:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 15:11:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 15:11:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 15:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6371 KB; 2026-03-30 15:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; rules::ProcessConditionsCache: 239 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6664 KB; 2026-03-30 15:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 170 KB; rules::RuleEvaluationCtx: 130 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6537 KB; 2026-03-30 15:14:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 15:08:29, To:, 2026-03-30 15:14:33, Duration (s):, 364, Events Per Second:, 0.873, Events:, 318, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 317, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40018 2026-03-30 15:14:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s761ms. 2026-03-30 15:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 15:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2470 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 430 KB; CacheEntry: 360 KB; TcpIpConnectionsManager: 291 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 170 KB; rules::ProcessConditionsCache: 144 KB; rules::RuleEvaluationCtx: 130 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6479 KB; 2026-03-30 15:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1011 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 326 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 268 KB; rules::ProcessConditionsCache: 265 KB; rules::RuleEvaluationCtx: 234 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 18 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6919 KB; 2026-03-30 15:16:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 15:16:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 15:16:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 15:16:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 15:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1013 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 283 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 234 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 137 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6741 KB; 2026-03-30 15:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1058 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 324 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::RuleEvaluationCtx: 234 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6896 KB; 2026-03-30 15:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1082 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 234 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6931 KB; 2026-03-30 15:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 15:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1086 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; rules::RuleEvaluationCtx: 234 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 135 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6830 KB; 2026-03-30 15:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1092 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::RuleEvaluationCtx: 234 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 135 KB; BaseEvent: 48 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6817 KB; 2026-03-30 15:21:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 15:14:54, To:, 2026-03-30 15:21:33, Duration (s):, 399, Events Per Second:, 1.126, Events:, 450, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 449, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 55762 2026-03-30 15:21:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s994ms. 2026-03-30 15:21:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 15:21:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 15:21:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 15:21:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 15:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::RuleEvaluationCtx: 234 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 140 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6607 KB; 2026-03-30 15:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 235 KB; rules::RuleEvaluationCtx: 234 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 138 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6589 KB; 2026-03-30 15:24:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; rules::RuleEvaluationCtx: 234 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 142 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6661 KB; 2026-03-30 15:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 15:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:25:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 262 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; rules::RuleEvaluationCtx: 234 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 138 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6692 KB; 2026-03-30 15:26:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1009 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 234 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6758 KB; 2026-03-30 15:26:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 15:26:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 15:26:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 15:26:53 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 15:27:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1017 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 234 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 170 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6751 KB; 2026-03-30 15:28:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1019 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 234 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 168 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6715 KB; 2026-03-30 15:28:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 15:21:31, To:, 2026-03-30 15:28:33, Duration (s):, 422, Events Per Second:, 0.599, Events:, 253, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 246, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34194 2026-03-30 15:28:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s172ms. 2026-03-30 15:29:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 234 KB; TcpIpConnectionsManager: 217 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 167 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6535 KB; 2026-03-30 15:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 15:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:30:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::RuleEvaluationCtx: 234 KB; TcpIpConnectionsManager: 207 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6578 KB; 2026-03-30 15:31:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; rules::RuleEvaluationCtx: 234 KB; TcpIpConnectionsManager: 206 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6585 KB; 2026-03-30 15:31:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 15:31:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 15:31:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 15:31:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 15:32:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 909 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 234 KB; TcpIpConnectionsManager: 214 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6597 KB; 2026-03-30 15:33:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 909 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::RuleEvaluationCtx: 234 KB; TcpIpConnectionsManager: 214 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6611 KB; 2026-03-30 15:34:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 239 KB; rules::RuleEvaluationCtx: 234 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6691 KB; 2026-03-30 15:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 15:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:35:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 235 KB; rules::RuleEvaluationCtx: 234 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6684 KB; 2026-03-30 15:35:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 15:29:15, To:, 2026-03-30 15:35:33, Duration (s):, 378, Events Per Second:, 0.560, Events:, 212, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 141, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 35, Livegrid:, 35, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26024 2026-03-30 15:35:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s691ms. 2026-03-30 15:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 268 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 264 KB; rules::ProcessConditionsCache: 250 KB; rules::RuleEvaluationCtx: 234 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6750 KB; 2026-03-30 15:36:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 15:36:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 15:36:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 15:36:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 15:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 234 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6654 KB; 2026-03-30 15:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 239 KB; rules::RuleEvaluationCtx: 234 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6628 KB; 2026-03-30 15:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 234 KB; rules::RuleEvaluationCtx: 234 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 174 KB; BaseEvent: 71 KB; ProcessInfoCommandLineTag: 53 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6767 KB; 2026-03-30 15:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 15:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::RuleEvaluationCtx: 234 KB; TcpIpConnectionsManager: 207 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 174 KB; BaseEvent: 75 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6761 KB; 2026-03-30 15:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 991 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 234 KB; TcpIpConnectionsManager: 209 KB; rules::ProcessConditionsCache: 191 KB; cloudutils::CloudData: 174 KB; BaseEvent: 78 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6767 KB; 2026-03-30 15:41:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 15:41:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 15:41:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 15:41:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 15:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 991 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 234 KB; TcpIpConnectionsManager: 202 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 174 KB; BaseEvent: 79 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6763 KB; 2026-03-30 15:42:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 15:35:39, To:, 2026-03-30 15:42:33, Duration (s):, 414, Events Per Second:, 1.025, Events:, 425, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 238, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 93, Livegrid:, 93, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47477 2026-03-30 15:42:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s598ms. 2026-03-30 15:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; TcpIpConnectionsManager: 257 KB; rules::ProcessConditionsCache: 240 KB; rules::RuleEvaluationCtx: 234 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6711 KB; 2026-03-30 15:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 234 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6666 KB; 2026-03-30 15:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 15:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 234 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6676 KB; 2026-03-30 15:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::RuleEvaluationCtx: 234 KB; TcpIpConnectionsManager: 225 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6661 KB; 2026-03-30 15:46:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 15:46:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 15:46:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 15:46:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 15:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1123 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; rules::ProcessConditionsCache: 391 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 288 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; rules::RuleEvaluationCtx: 234 KB; cloudutils::CloudData: 174 KB; BaseEvent: 116 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7252 KB; 2026-03-30 15:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1150 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; rules::ProcessConditionsCache: 420 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 301 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; rules::RuleEvaluationCtx: 242 KB; cloudutils::CloudData: 174 KB; BaseEvent: 131 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7339 KB; 2026-03-30 15:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1151 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; rules::ProcessConditionsCache: 418 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 296 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; rules::RuleEvaluationCtx: 242 KB; cloudutils::CloudData: 174 KB; BaseEvent: 131 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7339 KB; 2026-03-30 15:49:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 15:42:26, To:, 2026-03-30 15:49:33, Duration (s):, 427, Events Per Second:, 1.881, Events:, 804, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 653, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 25, Livegrid:, 25, OriginUrl:, 0, Alarms:, 100, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 91561 2026-03-30 15:49:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s903ms. 2026-03-30 15:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 15:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1097 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; rules::ProcessConditionsCache: 422 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; rules::RuleEvaluationCtx: 242 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7018 KB; 2026-03-30 15:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1097 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; rules::ProcessConditionsCache: 422 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 259 KB; rules::RuleEvaluationCtx: 242 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7009 KB; 2026-03-30 15:51:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 15:51:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 15:51:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 15:51:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 15:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1122 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 242 KB; TcpIpConnectionsManager: 232 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6691 KB; 2026-03-30 15:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1123 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 242 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6703 KB; 2026-03-30 15:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1123 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 242 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6709 KB; 2026-03-30 15:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 15:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1151 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; rules::RuleEvaluationCtx: 242 KB; TcpIpConnectionsManager: 217 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6778 KB; 2026-03-30 15:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1161 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 242 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 45 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6763 KB; 2026-03-30 15:56:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 15:49:40, To:, 2026-03-30 15:56:33, Duration (s):, 413, Events Per Second:, 0.566, Events:, 234, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 187, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28640 2026-03-30 15:56:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s127ms. 2026-03-30 15:56:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 15:56:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 15:56:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 15:56:54 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 15:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 244 KB; rules::RuleEvaluationCtx: 242 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 48 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6481 KB; 2026-03-30 15:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; rules::RuleEvaluationCtx: 242 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6604 KB; 2026-03-30 15:58:30 7967327fc6c0 Error: Error while sending control request to server at "eu01.agent.edr.eset.systems:8093", certificate was set to: /CN=Agent=c771dbf0-85fb-4c94-8961-6227fa858111. getReply: End of file [asio.misc:2] 2026-03-30 15:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; rules::RuleEvaluationCtx: 242 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6610 KB; 2026-03-30 15:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 15:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 15:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:00:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 253 KB; rules::RuleEvaluationCtx: 242 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6575 KB; 2026-03-30 16:01:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::RuleEvaluationCtx: 242 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6577 KB; 2026-03-30 16:01:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 16:01:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 16:01:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 16:01:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 16:02:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; TcpIpConnectionsManager: 257 KB; rules::RuleEvaluationCtx: 242 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 121 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6703 KB; 2026-03-30 16:03:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 242 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 57 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6607 KB; 2026-03-30 16:03:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 15:56:44, To:, 2026-03-30 16:03:33, Duration (s):, 409, Events Per Second:, 0.635, Events:, 260, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 253, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32898 2026-03-30 16:03:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s107ms. 2026-03-30 16:04:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::RuleEvaluationCtx: 242 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6461 KB; 2026-03-30 16:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 16:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:05:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::RuleEvaluationCtx: 242 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6533 KB; 2026-03-30 16:06:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 242 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6611 KB; 2026-03-30 16:06:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 16:06:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 16:06:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 16:06:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 16:07:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::RuleEvaluationCtx: 242 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6596 KB; 2026-03-30 16:08:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 243 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6623 KB; 2026-03-30 16:09:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 243 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6598 KB; 2026-03-30 16:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 16:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:10:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 243 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6584 KB; 2026-03-30 16:10:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 16:04:55, To:, 2026-03-30 16:10:33, Duration (s):, 338, Events Per Second:, 0.700, Events:, 237, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 166, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 35, Livegrid:, 35, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28164 2026-03-30 16:10:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s786ms. 2026-03-30 16:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 870 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 243 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6443 KB; 2026-03-30 16:11:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 16:11:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 16:11:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 16:11:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 16:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 870 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 243 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6443 KB; 2026-03-30 16:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 884 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 243 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6475 KB; 2026-03-30 16:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::RuleEvaluationCtx: 243 KB; TcpIpConnectionsManager: 224 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 94 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6592 KB; 2026-03-30 16:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 16:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 224 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6603 KB; 2026-03-30 16:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 224 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6607 KB; 2026-03-30 16:16:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 16:16:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 16:16:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 16:16:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 16:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6608 KB; 2026-03-30 16:17:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 16:08:18, To:, 2026-03-30 16:17:33, Duration (s):, 555, Events Per Second:, 0.466, Events:, 259, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 256, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34545 2026-03-30 16:17:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s766ms. 2026-03-30 16:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 882 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 204 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 101 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6488 KB; 2026-03-30 16:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 909 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6527 KB; 2026-03-30 16:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 16:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 232 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6532 KB; 2026-03-30 16:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6540 KB; 2026-03-30 16:21:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 16:21:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 16:21:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 16:21:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 16:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6517 KB; 2026-03-30 16:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6520 KB; 2026-03-30 16:24:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 108 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6519 KB; 2026-03-30 16:24:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 16:17:53, To:, 2026-03-30 16:24:33, Duration (s):, 400, Events Per Second:, 0.235, Events:, 94, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 93, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13940 2026-03-30 16:24:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s686ms. 2026-03-30 16:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 16:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:25:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 264 KB; TcpIpConnectionsManager: 252 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 230 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6700 KB; 2026-03-30 16:26:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6594 KB; 2026-03-30 16:26:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 16:26:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 16:26:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 16:26:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 16:27:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 258 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6610 KB; 2026-03-30 16:28:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6591 KB; 2026-03-30 16:29:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 214 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6568 KB; 2026-03-30 16:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 16:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:30:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2523 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 436 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 235 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6667 KB; 2026-03-30 16:31:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6721 KB; 2026-03-30 16:31:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 16:24:53, To:, 2026-03-30 16:31:33, Duration (s):, 400, Events Per Second:, 0.624, Events:, 250, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 249, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32002 2026-03-30 16:31:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s749ms. 2026-03-30 16:31:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 16:31:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 16:31:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 16:31:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 16:32:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 732 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 117 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6632 KB; 2026-03-30 16:33:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 133 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6653 KB; 2026-03-30 16:34:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6586 KB; 2026-03-30 16:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 16:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:35:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 266 KB; TcpIpConnectionsManager: 265 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6796 KB; 2026-03-30 16:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 124 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6663 KB; 2026-03-30 16:36:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 16:36:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 16:36:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 16:36:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 16:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 1017 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 286 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 18 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6837 KB; 2026-03-30 16:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 1017 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6745 KB; 2026-03-30 16:38:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 16:31:39, To:, 2026-03-30 16:38:33, Duration (s):, 414, Events Per Second:, 0.714, Events:, 296, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 295, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36333 2026-03-30 16:38:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s200ms. 2026-03-30 16:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 127 KB; ProcessInfoCommandLineTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6659 KB; 2026-03-30 16:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 16:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 995 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 135 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6687 KB; 2026-03-30 16:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 997 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 133 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6648 KB; 2026-03-30 16:41:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 16:41:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 16:41:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 16:41:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 16:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 209 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 135 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6653 KB; 2026-03-30 16:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 133 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6654 KB; 2026-03-30 16:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 1009 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 214 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 138 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6677 KB; 2026-03-30 16:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 16:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 1016 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 214 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 138 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6689 KB; 2026-03-30 16:45:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 16:38:38, To:, 2026-03-30 16:45:33, Duration (s):, 415, Events Per Second:, 0.464, Events:, 193, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 192, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26347 2026-03-30 16:45:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s734ms. 2026-03-30 16:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 138 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6531 KB; 2026-03-30 16:46:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 16:46:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 16:46:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 16:46:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 16:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 158 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6572 KB; 2026-03-30 16:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6525 KB; 2026-03-30 16:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 140 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6545 KB; 2026-03-30 16:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 16:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 162 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6627 KB; 2026-03-30 16:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6613 KB; 2026-03-30 16:51:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 16:51:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 16:51:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 16:51:55 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 16:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 235 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6618 KB; 2026-03-30 16:52:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 16:45:55, To:, 2026-03-30 16:52:33, Duration (s):, 398, Events Per Second:, 0.364, Events:, 145, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 141, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19905 2026-03-30 16:52:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s726ms. 2026-03-30 16:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 217 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 162 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6598 KB; 2026-03-30 16:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 920 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 217 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6607 KB; 2026-03-30 16:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 16:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 217 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6572 KB; 2026-03-30 16:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6576 KB; 2026-03-30 16:56:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 16:56:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 16:56:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 16:56:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 16:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 947 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6617 KB; 2026-03-30 16:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 948 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6606 KB; 2026-03-30 16:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 250 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6654 KB; 2026-03-30 16:59:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 16:53:03, To:, 2026-03-30 16:59:33, Duration (s):, 390, Events Per Second:, 0.456, Events:, 178, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 175, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23531 2026-03-30 16:59:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s711ms. 2026-03-30 16:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 16:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 16:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:00:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2525 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 229 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6614 KB; 2026-03-30 17:01:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 252 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 170 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6663 KB; 2026-03-30 17:01:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 17:01:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 17:01:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 17:01:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 17:02:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1009 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6834 KB; 2026-03-30 17:03:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1082 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 296 KB; rules::ProcessConditionsCache: 275 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 174 KB; BaseEvent: 65 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7033 KB; 2026-03-30 17:04:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1130 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 323 KB; TcpIpConnectionsManager: 289 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 174 KB; BaseEvent: 90 KB; ProcessInfoCommandLineTag: 49 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7142 KB; 2026-03-30 17:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 17:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:05:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1133 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 326 KB; TcpIpConnectionsManager: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; BaseEvent: 92 KB; ProcessInfoCommandLineTag: 49 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7141 KB; 2026-03-30 17:06:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1133 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 326 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 174 KB; BaseEvent: 94 KB; ProcessInfoCommandLineTag: 49 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7090 KB; 2026-03-30 17:06:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 17:00:00, To:, 2026-03-30 17:06:33, Duration (s):, 393, Events Per Second:, 1.481, Events:, 583, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 513, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 69, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 70368 2026-03-30 17:06:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s053ms. 2026-03-30 17:06:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 17:06:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 17:06:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 17:06:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 17:07:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6711 KB; 2026-03-30 17:08:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; rules::ProcessConditionsCache: 385 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6815 KB; 2026-03-30 17:09:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 966 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6816 KB; 2026-03-30 17:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 17:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:10:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 341 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 240 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6860 KB; 2026-03-30 17:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1007 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 365 KB; TcpIpConnectionsManager: 262 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6943 KB; 2026-03-30 17:11:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 17:11:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 17:11:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 17:11:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 17:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1050 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; rules::ProcessConditionsCache: 402 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7045 KB; 2026-03-30 17:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 291 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 93 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6796 KB; 2026-03-30 17:13:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 17:08:12, To:, 2026-03-30 17:13:33, Duration (s):, 321, Events Per Second:, 1.327, Events:, 427, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 426, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53290 2026-03-30 17:13:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s913ms. 2026-03-30 17:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 275 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6536 KB; 2026-03-30 17:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 17:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 966 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 278 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6557 KB; 2026-03-30 17:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 240 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 45 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6538 KB; 2026-03-30 17:16:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 17:16:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 17:16:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 17:16:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 17:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 976 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6538 KB; 2026-03-30 17:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6514 KB; 2026-03-30 17:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 209 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6540 KB; 2026-03-30 17:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 17:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1007 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6627 KB; 2026-03-30 17:20:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 17:13:33, To:, 2026-03-30 17:20:33, Duration (s):, 420, Events Per Second:, 0.368, Events:, 155, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 154, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23805 2026-03-30 17:20:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s643ms. 2026-03-30 17:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 245 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6500 KB; 2026-03-30 17:21:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 17:21:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 17:21:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 17:21:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 17:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 283 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6595 KB; 2026-03-30 17:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 956 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 276 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6569 KB; 2026-03-30 17:24:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 966 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 257 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6574 KB; 2026-03-30 17:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 17:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:25:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 250 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6604 KB; 2026-03-30 17:26:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 53 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6602 KB; 2026-03-30 17:26:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 17:26:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 17:26:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 17:26:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 17:27:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1039 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 126 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6787 KB; 2026-03-30 17:27:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 17:20:32, To:, 2026-03-30 17:27:33, Duration (s):, 421, Events Per Second:, 0.847, Events:, 357, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 356, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46342 2026-03-30 17:27:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s853ms. 2026-03-30 17:28:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 945 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 253 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 6522 KB; 2026-03-30 17:29:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6567 KB; 2026-03-30 17:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 17:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:30:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 975 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6575 KB; 2026-03-30 17:31:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 975 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 61 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6554 KB; 2026-03-30 17:31:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 17:31:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 17:31:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 17:31:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 17:32:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 209 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6552 KB; 2026-03-30 17:33:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6549 KB; 2026-03-30 17:34:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6625 KB; 2026-03-30 17:34:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 17:27:33, To:, 2026-03-30 17:34:33, Duration (s):, 420, Events Per Second:, 0.397, Events:, 167, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 166, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24531 2026-03-30 17:34:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s071ms. 2026-03-30 17:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 17:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:35:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 250 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 238 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6508 KB; 2026-03-30 17:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 160 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6712 KB; 2026-03-30 17:36:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 17:36:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 17:36:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 17:36:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 17:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 288 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6620 KB; 2026-03-30 17:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 266 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6603 KB; 2026-03-30 17:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 286 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 58 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6753 KB; 2026-03-30 17:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 17:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1061 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 240 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 58 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6717 KB; 2026-03-30 17:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 1069 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 232 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 59 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6725 KB; 2026-03-30 17:41:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 17:34:35, To:, 2026-03-30 17:41:33, Duration (s):, 418, Events Per Second:, 1.111, Events:, 465, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 464, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57729 2026-03-30 17:41:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s512ms. 2026-03-30 17:41:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 17:41:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 17:41:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 17:41:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 17:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 75 KB; ProcessInfoCommandLineTag: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6533 KB; 2026-03-30 17:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6541 KB; 2026-03-30 17:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 209 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6546 KB; 2026-03-30 17:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 17:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2526 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 211 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6559 KB; 2026-03-30 17:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 77 KB; ProcessInfoCommandLineTag: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6555 KB; 2026-03-30 17:46:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 17:46:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 17:46:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 17:46:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 17:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6673 KB; 2026-03-30 17:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 235 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6613 KB; 2026-03-30 17:48:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 17:42:52, To:, 2026-03-30 17:48:33, Duration (s):, 341, Events Per Second:, 0.337, Events:, 115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 114, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15940 2026-03-30 17:48:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s386ms. 2026-03-30 17:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 235 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6486 KB; 2026-03-30 17:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 17:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 245 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6544 KB; 2026-03-30 17:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 86 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6521 KB; 2026-03-30 17:51:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 17:51:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 17:51:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 17:51:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 17:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 86 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6541 KB; 2026-03-30 17:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 86 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6514 KB; 2026-03-30 17:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 135 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6639 KB; 2026-03-30 17:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 17:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 86 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6568 KB; 2026-03-30 17:55:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 17:48:35, To:, 2026-03-30 17:55:33, Duration (s):, 418, Events Per Second:, 0.368, Events:, 154, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 153, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20869 2026-03-30 17:55:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s716ms. 2026-03-30 17:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 259 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 229 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6796 KB; 2026-03-30 17:56:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 17:56:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 17:56:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 17:56:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 17:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 285 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 117 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6670 KB; 2026-03-30 17:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 263 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6640 KB; 2026-03-30 17:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 244 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6629 KB; 2026-03-30 17:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 17:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 17:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:00:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 126 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6622 KB; 2026-03-30 18:01:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1070 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 202 KB; rules::ProcessConditionsCache: 175 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6799 KB; 2026-03-30 18:01:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 18:01:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 18:01:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 18:01:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 18:02:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1070 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 170 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6793 KB; 2026-03-30 18:02:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 17:55:41, To:, 2026-03-30 18:02:33, Duration (s):, 412, Events Per Second:, 1.085, Events:, 448, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 433, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56174 2026-03-30 18:02:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s960ms. 2026-03-30 18:03:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 227 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 174 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6681 KB; 2026-03-30 18:04:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 225 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6687 KB; 2026-03-30 18:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 18:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:05:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1020 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6750 KB; 2026-03-30 18:06:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1032 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 240 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6786 KB; 2026-03-30 18:06:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 18:06:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 18:06:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 18:06:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 18:07:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 266 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6809 KB; 2026-03-30 18:08:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1066 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6819 KB; 2026-03-30 18:09:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1110 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 250 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 62 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6869 KB; 2026-03-30 18:09:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 18:02:40, To:, 2026-03-30 18:09:33, Duration (s):, 413, Events Per Second:, 0.945, Events:, 391, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 376, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 7, Livegrid:, 7, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47353 2026-03-30 18:09:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s958ms. 2026-03-30 18:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 18:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:10:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6798 KB; 2026-03-30 18:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1016 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 278 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6790 KB; 2026-03-30 18:11:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 18:11:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 18:11:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 18:11:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 18:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1022 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 270 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6778 KB; 2026-03-30 18:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1022 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 242 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6778 KB; 2026-03-30 18:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1025 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 211 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6762 KB; 2026-03-30 18:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 18:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1041 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 214 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6808 KB; 2026-03-30 18:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1041 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 214 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6794 KB; 2026-03-30 18:16:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 18:09:30, To:, 2026-03-30 18:16:33, Duration (s):, 423, Events Per Second:, 0.562, Events:, 238, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 237, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30526 2026-03-30 18:16:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s777ms. 2026-03-30 18:16:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 18:16:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 18:16:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 18:16:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 18:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 222 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6615 KB; 2026-03-30 18:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 242 KB; rules::ProcessConditionsCache: 219 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6690 KB; 2026-03-30 18:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 945 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 258 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6702 KB; 2026-03-30 18:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 18:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 250 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6707 KB; 2026-03-30 18:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 237 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6720 KB; 2026-03-30 18:21:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 18:21:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 18:21:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 18:21:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 18:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 201 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6688 KB; 2026-03-30 18:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 199 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6693 KB; 2026-03-30 18:23:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 18:16:53, To:, 2026-03-30 18:23:33, Duration (s):, 400, Events Per Second:, 0.414, Events:, 166, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 165, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22013 2026-03-30 18:23:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s704ms. 2026-03-30 18:24:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 870 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 672 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6589 KB; 2026-03-30 18:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 18:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:25:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 873 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 204 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6598 KB; 2026-03-30 18:26:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 875 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 206 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6606 KB; 2026-03-30 18:26:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 18:26:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 18:26:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 18:26:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 18:27:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 875 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; rules::RuleEvaluationCtx: 244 KB; rules::ProcessConditionsCache: 206 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6608 KB; 2026-03-30 18:28:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 224 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6591 KB; 2026-03-30 18:29:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 224 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6597 KB; 2026-03-30 18:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 18:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:30:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::RuleEvaluationCtx: 244 KB; TcpIpConnectionsManager: 224 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6620 KB; 2026-03-30 18:30:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 18:24:28, To:, 2026-03-30 18:30:33, Duration (s):, 365, Events Per Second:, 0.238, Events:, 87, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 86, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13649 2026-03-30 18:30:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s811ms. 2026-03-30 18:31:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 910 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6655 KB; 2026-03-30 18:31:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 18:31:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 18:31:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 18:31:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 18:32:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 358 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 268 KB; TcpIpConnectionsManager: 265 KB; rules::RuleEvaluationCtx: 246 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6919 KB; 2026-03-30 18:33:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::ProcessConditionsCache: 248 KB; rules::RuleEvaluationCtx: 246 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6791 KB; 2026-03-30 18:34:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 963 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 260 KB; rules::ProcessConditionsCache: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 246 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6787 KB; 2026-03-30 18:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 18:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:35:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 270 KB; rules::ProcessConditionsCache: 248 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6846 KB; 2026-03-30 18:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6844 KB; 2026-03-30 18:36:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 18:36:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 18:36:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 18:36:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 18:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 248 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 224 KB; cloudutils::CloudData: 173 KB; BaseEvent: 47 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6849 KB; 2026-03-30 18:37:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 18:30:35, To:, 2026-03-30 18:37:33, Duration (s):, 418, Events Per Second:, 0.769, Events:, 322, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 245, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 38, Livegrid:, 38, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37185 2026-03-30 18:37:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s324ms. 2026-03-30 18:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 891 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::ProcessConditionsCache: 247 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6651 KB; 2026-03-30 18:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 948 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 258 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 173 KB; BaseEvent: 65 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6783 KB; 2026-03-30 18:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 18:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 253 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 173 KB; BaseEvent: 69 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6826 KB; 2026-03-30 18:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1023 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 361 KB; TcpIpConnectionsManager: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; rules::RuleEvaluationCtx: 246 KB; cloudutils::CloudData: 173 KB; BaseEvent: 78 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7069 KB; 2026-03-30 18:41:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 18:41:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 18:41:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 18:41:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 18:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 337 KB; TcpIpConnectionsManager: 307 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; cloudutils::CloudData: 173 KB; BaseEvent: 133 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7191 KB; 2026-03-30 18:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 337 KB; TcpIpConnectionsManager: 281 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 173 KB; BaseEvent: 134 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7193 KB; 2026-03-30 18:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 337 KB; TcpIpConnectionsManager: 268 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 173 KB; BaseEvent: 134 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7185 KB; 2026-03-30 18:44:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 18:38:49, To:, 2026-03-30 18:44:33, Duration (s):, 344, Events Per Second:, 2.334, Events:, 805, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 532, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 118, Livegrid:, 118, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 89321 2026-03-30 18:44:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s934ms. 2026-03-30 18:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 18:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 997 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::ProcessConditionsCache: 341 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6847 KB; 2026-03-30 18:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 276 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 60 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6681 KB; 2026-03-30 18:46:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 18:46:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 18:46:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 18:46:56 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 18:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 276 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6648 KB; 2026-03-30 18:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1070 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 283 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 32 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6687 KB; 2026-03-30 18:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1076 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 246 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 47 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6690 KB; 2026-03-30 18:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 18:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 311 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 263 KB; rules::RuleEvaluationCtx: 246 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 152 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6965 KB; 2026-03-30 18:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 1148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 280 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 47 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6810 KB; 2026-03-30 18:51:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 18:44:33, To:, 2026-03-30 18:51:33, Duration (s):, 420, Events Per Second:, 1.107, Events:, 466, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 465, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56736 2026-03-30 18:51:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s871ms. 2026-03-30 18:51:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 18:51:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 18:51:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 18:51:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 18:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 948 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 246 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6546 KB; 2026-03-30 18:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 255 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6542 KB; 2026-03-30 18:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 214 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6505 KB; 2026-03-30 18:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 18:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6565 KB; 2026-03-30 18:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6558 KB; 2026-03-30 18:56:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 18:56:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 18:56:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 18:56:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 18:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 224 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6581 KB; 2026-03-30 18:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 173 KB; ProcessInfoCommandLineTag: 47 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6551 KB; 2026-03-30 18:58:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 18:52:49, To:, 2026-03-30 18:58:33, Duration (s):, 344, Events Per Second:, 0.307, Events:, 106, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 105, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15295 2026-03-30 18:58:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s764ms. 2026-03-30 18:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6527 KB; 2026-03-30 18:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 173, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 18:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 18:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:00:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6498 KB; 2026-03-30 19:01:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 929 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6563 KB; 2026-03-30 19:01:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 19:01:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 19:01:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 19:01:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 19:02:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 250 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6565 KB; 2026-03-30 19:03:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 217 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6542 KB; 2026-03-30 19:04:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6543 KB; 2026-03-30 19:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 19:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:true, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:05:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6544 KB; 2026-03-30 19:05:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 18:59:12, To:, 2026-03-30 19:05:33, Duration (s):, 381, Events Per Second:, 0.607, Events:, 232, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 179, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28644 2026-03-30 19:05:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s188ms. 2026-03-30 19:06:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 878 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6440 KB; 2026-03-30 19:06:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 19:06:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 19:06:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 19:06:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 19:07:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 878 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6458 KB; 2026-03-30 19:08:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6467 KB; 2026-03-30 19:09:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 232 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6575 KB; 2026-03-30 19:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 19:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:10:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; TcpIpConnectionsManager: 250 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6630 KB; 2026-03-30 19:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 789 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6751 KB; 2026-03-30 19:11:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 19:11:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 19:11:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 19:11:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 19:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 768 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6734 KB; 2026-03-30 19:12:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 19:06:47, To:, 2026-03-30 19:12:33, Duration (s):, 346, Events Per Second:, 0.746, Events:, 259, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 258, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33710 2026-03-30 19:12:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s911ms. 2026-03-30 19:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 897 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 770 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6595 KB; 2026-03-30 19:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 732 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 204 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6561 KB; 2026-03-30 19:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 19:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2528 KB; ProcessInfo: 903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 734 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 173 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6572 KB; 2026-03-30 19:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 906 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 735 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6584 KB; 2026-03-30 19:16:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 19:16:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 19:16:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 19:16:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 19:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 91 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6589 KB; 2026-03-30 19:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 232 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 93 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6552 KB; 2026-03-30 19:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6553 KB; 2026-03-30 19:19:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 19:13:21, To:, 2026-03-30 19:19:33, Duration (s):, 372, Events Per Second:, 0.338, Events:, 126, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 121, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17291 2026-03-30 19:19:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s753ms. 2026-03-30 19:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 19:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 913 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 91 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6499 KB; 2026-03-30 19:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 142 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6603 KB; 2026-03-30 19:21:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 19:21:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 19:21:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 19:21:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 19:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6562 KB; 2026-03-30 19:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 102 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6573 KB; 2026-03-30 19:24:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6569 KB; 2026-03-30 19:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 19:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:25:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 945 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 259 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 204 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6564 KB; 2026-03-30 19:26:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 945 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 260 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 98 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6561 KB; 2026-03-30 19:26:33 7967594126c0 Info: Events Statistics, From:, 2026-03-30 19:19:36, To:, 2026-03-30 19:26:33, Duration (s):, 417, Events Per Second:, 0.246, Events:, 103, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 95, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15948 2026-03-30 19:26:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s779ms. 2026-03-30 19:26:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 19:26:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 19:26:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 19:26:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 19:27:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 878 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 99 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6479 KB; 2026-03-30 19:28:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6540 KB; 2026-03-30 19:29:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 101 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6531 KB; 2026-03-30 19:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 19:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:30:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2529 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 437 KB; CacheEntry: 368 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6556 KB; 2026-03-30 19:31:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6571 KB; 2026-03-30 19:31:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 19:31:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 19:31:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 19:31:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 19:32:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 261 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 242 KB; rules::ProcessConditionsCache: 191 KB; cloudutils::CloudData: 175 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6744 KB; 2026-03-30 19:33:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 255 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 112 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6662 KB; 2026-03-30 19:33:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 19:27:28, To:, 2026-03-30 19:33:34, Duration (s):, 366, Events Per Second:, 0.664, Events:, 243, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 242, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30800 2026-03-30 19:33:34 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s726ms. 2026-03-30 19:34:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 925 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 253 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6589 KB; 2026-03-30 19:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 19:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:35:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 270 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 113 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6642 KB; 2026-03-30 19:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 252 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 127 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6674 KB; 2026-03-30 19:36:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 19:36:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 19:36:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 19:36:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 19:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 975 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 252 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6662 KB; 2026-03-30 19:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 975 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 111 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6630 KB; 2026-03-30 19:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 1019 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6688 KB; 2026-03-30 19:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 19:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 1023 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6697 KB; 2026-03-30 19:40:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 19:33:40, To:, 2026-03-30 19:40:34, Duration (s):, 414, Events Per Second:, 0.638, Events:, 264, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 263, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33939 2026-03-30 19:40:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s506ms. 2026-03-30 19:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::RuleEvaluationCtx: 246 KB; TcpIpConnectionsManager: 235 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 164 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6672 KB; 2026-03-30 19:41:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 19:41:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 19:41:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 19:41:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 19:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; rules::RuleEvaluationCtx: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6634 KB; 2026-03-30 19:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 1004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 291 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; rules::ProcessConditionsCache: 213 KB; cloudutils::CloudData: 175 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7058 KB; 2026-03-30 19:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 1028 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 296 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 160 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7046 KB; 2026-03-30 19:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 19:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2548 KB; ProcessInfo: 1031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6990 KB; 2026-03-30 19:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 1031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6985 KB; 2026-03-30 19:46:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 19:46:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 19:46:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 19:46:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 19:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 1135 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 234 KB; cloudutils::CloudData: 176 KB; BaseEvent: 81 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7274 KB; 2026-03-30 19:47:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 19:40:46, To:, 2026-03-30 19:47:34, Duration (s):, 408, Events Per Second:, 1.875, Events:, 765, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 685, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 79, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 89388 2026-03-30 19:47:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s754ms. 2026-03-30 19:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 1177 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; cloudutils::CloudData: 176 KB; BaseEvent: 57 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7124 KB; 2026-03-30 19:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 1177 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; cloudutils::CloudData: 176 KB; BaseEvent: 57 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7131 KB; 2026-03-30 19:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 19:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 1183 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; cloudutils::CloudData: 176 KB; BaseEvent: 60 KB; rules::ProcessConditionsCache: 47 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7108 KB; 2026-03-30 19:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 1183 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 176 KB; BaseEvent: 60 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7054 KB; 2026-03-30 19:51:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 19:51:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 19:51:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 19:51:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 19:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 1183 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 255 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 176 KB; BaseEvent: 61 KB; rules::ProcessConditionsCache: 52 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7057 KB; 2026-03-30 19:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 1185 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 176 KB; BaseEvent: 61 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7068 KB; 2026-03-30 19:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 1185 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 176 KB; BaseEvent: 60 KB; rules::ProcessConditionsCache: 56 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7069 KB; 2026-03-30 19:54:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 19:47:34, To:, 2026-03-30 19:54:34, Duration (s):, 420, Events Per Second:, 0.828, Events:, 348, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 291, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 56, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42121 2026-03-30 19:54:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s365ms. 2026-03-30 19:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 19:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 879 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 261 KB; TcpIpConnectionsManager: 204 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6696 KB; 2026-03-30 19:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 263 KB; TcpIpConnectionsManager: 204 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6701 KB; 2026-03-30 19:56:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 19:56:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 19:56:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 19:56:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 19:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 263 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6764 KB; 2026-03-30 19:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 623 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 90 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6810 KB; 2026-03-30 19:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6773 KB; 2026-03-30 19:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 19:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 19:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:00:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2551 KB; ProcessInfo: 948 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 72 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6798 KB; 2026-03-30 20:01:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6817 KB; 2026-03-30 20:01:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 19:54:58, To:, 2026-03-30 20:01:34, Duration (s):, 396, Events Per Second:, 0.548, Events:, 217, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 216, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28961 2026-03-30 20:01:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s404ms. 2026-03-30 20:01:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 20:01:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 20:01:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 20:01:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 20:02:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 214 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6704 KB; 2026-03-30 20:03:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 242 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 108 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6800 KB; 2026-03-30 20:04:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 126 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6865 KB; 2026-03-30 20:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 20:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:05:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 84 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6845 KB; 2026-03-30 20:06:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 82 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6842 KB; 2026-03-30 20:06:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 20:06:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 20:06:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 20:06:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 20:07:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1014 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 128 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6989 KB; 2026-03-30 20:08:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1017 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 88 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6936 KB; 2026-03-30 20:08:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 20:01:37, To:, 2026-03-30 20:08:34, Duration (s):, 417, Events Per Second:, 0.899, Events:, 375, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 312, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 31, Livegrid:, 31, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44249 2026-03-30 20:08:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s854ms. 2026-03-30 20:09:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6779 KB; 2026-03-30 20:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 20:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:10:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6748 KB; 2026-03-30 20:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6732 KB; 2026-03-30 20:11:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 20:11:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 20:11:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 20:11:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 20:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6731 KB; 2026-03-30 20:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 963 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 454 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 137 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6858 KB; 2026-03-30 20:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1163 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 470 KB; ModuleInfoCache: 440 KB; TcpIpConnectionsManager: 383 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 256 KB; rules::ProcessConditionsCache: 223 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 52 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7404 KB; 2026-03-30 20:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 20:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1180 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; TcpIpConnectionsManager: 401 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 157 KB; BaseEvent: 57 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7384 KB; 2026-03-30 20:15:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 20:08:20, To:, 2026-03-30 20:15:34, Duration (s):, 434, Events Per Second:, 1.599, Events:, 694, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 685, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 85237 2026-03-30 20:15:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s846ms. 2026-03-30 20:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; TcpIpConnectionsManager: 408 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7242 KB; 2026-03-30 20:16:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 20:16:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 20:16:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 20:16:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 20:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1176 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 306 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7157 KB; 2026-03-30 20:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1176 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 114 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7108 KB; 2026-03-30 20:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1199 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7138 KB; 2026-03-30 20:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 20:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1204 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 120 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7128 KB; 2026-03-30 20:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1227 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 153 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7212 KB; 2026-03-30 20:21:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 20:21:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 20:21:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 20:21:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 20:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1227 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7161 KB; 2026-03-30 20:22:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 20:15:34, To:, 2026-03-30 20:22:34, Duration (s):, 420, Events Per Second:, 0.593, Events:, 249, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 248, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34529 2026-03-30 20:22:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s754ms. 2026-03-30 20:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 909 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6794 KB; 2026-03-30 20:24:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 935 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 245 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 160 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6890 KB; 2026-03-30 20:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 20:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:25:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 232 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6888 KB; 2026-03-30 20:26:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 127 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6901 KB; 2026-03-30 20:26:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 20:26:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 20:26:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 20:26:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 20:27:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6864 KB; 2026-03-30 20:28:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6846 KB; 2026-03-30 20:29:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 123 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6850 KB; 2026-03-30 20:29:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 20:23:18, To:, 2026-03-30 20:29:34, Duration (s):, 376, Events Per Second:, 0.346, Events:, 130, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 129, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17953 2026-03-30 20:29:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s121ms. 2026-03-30 20:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 20:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:30:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 134 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6781 KB; 2026-03-30 20:31:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 253 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 132 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 6783 KB; 2026-03-30 20:31:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 20:31:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 20:31:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 20:31:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 20:32:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6849 KB; 2026-03-30 20:33:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 232 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6852 KB; 2026-03-30 20:34:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 932 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 232 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6858 KB; 2026-03-30 20:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 20:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:35:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6838 KB; 2026-03-30 20:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6841 KB; 2026-03-30 20:36:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 20:29:52, To:, 2026-03-30 20:36:34, Duration (s):, 402, Events Per Second:, 0.311, Events:, 125, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 124, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17559 2026-03-30 20:36:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s369ms. 2026-03-30 20:36:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 20:36:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 20:36:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 20:36:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 20:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 882 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 136 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6770 KB; 2026-03-30 20:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 626 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 138 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6764 KB; 2026-03-30 20:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 951 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 143 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6876 KB; 2026-03-30 20:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 20:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 957 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 147 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6892 KB; 2026-03-30 20:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 160 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6957 KB; 2026-03-30 20:41:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 20:41:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 20:41:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 20:41:57 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 20:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 979 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 149 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6928 KB; 2026-03-30 20:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1007 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 191 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7037 KB; 2026-03-30 20:43:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 20:37:34, To:, 2026-03-30 20:43:34, Duration (s):, 360, Events Per Second:, 0.919, Events:, 331, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 330, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42323 2026-03-30 20:43:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s838ms. 2026-03-30 20:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 240 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 148 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6892 KB; 2026-03-30 20:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 20:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 940 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 152 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6870 KB; 2026-03-30 20:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6891 KB; 2026-03-30 20:46:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 20:46:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 20:46:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 20:46:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 20:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 978 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 247 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 156 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6963 KB; 2026-03-30 20:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 154 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6947 KB; 2026-03-30 20:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1169 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; rules::ProcessConditionsCache: 334 KB; TcpIpConnectionsManager: 330 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 176 KB; BaseEvent: 103 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7498 KB; 2026-03-30 20:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 20:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1367 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; TcpIpConnectionsManager: 393 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; BaseEvent: 194 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 176 KB; BatchSerializer::EventsQueueTag: 57 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7736 KB; 2026-03-30 20:50:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 20:43:33, To:, 2026-03-30 20:50:34, Duration (s):, 421, Events Per Second:, 2.792, Events:, 1176, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1015, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 160, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 136109 2026-03-30 20:50:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s736ms. 2026-03-30 20:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; TcpIpConnectionsManager: 383 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 133 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7411 KB; 2026-03-30 20:51:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 20:51:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 20:51:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 20:51:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 20:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 729 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 135 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7333 KB; 2026-03-30 20:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1313 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7413 KB; 2026-03-30 20:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1317 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 146 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7280 KB; 2026-03-30 20:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 20:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1324 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 144 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7297 KB; 2026-03-30 20:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1332 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; TcpIpConnectionsManager: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 142 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7300 KB; 2026-03-30 20:56:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 20:56:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 20:56:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 20:56:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 20:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 1333 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 140 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7272 KB; 2026-03-30 20:57:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 20:50:33, To:, 2026-03-30 20:57:34, Duration (s):, 421, Events Per Second:, 0.470, Events:, 198, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 197, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27123 2026-03-30 20:57:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s746ms. 2026-03-30 20:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 895 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 138 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6792 KB; 2026-03-30 20:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 901 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 145 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6810 KB; 2026-03-30 20:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 20:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 20:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:00:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2553 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 440 KB; CacheEntry: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 158 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6893 KB; 2026-03-30 21:01:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1022 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 230 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7041 KB; 2026-03-30 21:01:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 21:01:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 21:01:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 21:01:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 21:02:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1022 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 227 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7045 KB; 2026-03-30 21:03:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1022 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; TcpIpConnectionsManager: 202 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7026 KB; 2026-03-30 21:04:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1022 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 202 KB; TcpIpConnectionsManager: 199 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7026 KB; 2026-03-30 21:04:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 20:57:51, To:, 2026-03-30 21:04:34, Duration (s):, 403, Events Per Second:, 0.801, Events:, 323, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 319, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41569 2026-03-30 21:04:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s717ms. 2026-03-30 21:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 21:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:05:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 357 KB; TcpIpConnectionsManager: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 264 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7162 KB; 2026-03-30 21:06:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 225 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7025 KB; 2026-03-30 21:06:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 21:06:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 21:06:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 21:06:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 21:07:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 950 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 278 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7000 KB; 2026-03-30 21:08:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 997 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 291 KB; rules::ProcessConditionsCache: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7147 KB; 2026-03-30 21:09:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1047 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7118 KB; 2026-03-30 21:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 21:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:10:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1075 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 239 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 46 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7207 KB; 2026-03-30 21:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1075 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 271 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 47 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7179 KB; 2026-03-30 21:11:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 21:04:34, To:, 2026-03-30 21:11:34, Duration (s):, 420, Events Per Second:, 1.273, Events:, 535, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 534, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 64597 2026-03-30 21:11:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s020ms. 2026-03-30 21:11:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 21:11:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 21:11:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 21:11:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 21:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 229 KB; rules::ProcessConditionsCache: 222 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7004 KB; 2026-03-30 21:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; rules::ProcessConditionsCache: 218 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6988 KB; 2026-03-30 21:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; rules::ProcessConditionsCache: 215 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6983 KB; 2026-03-30 21:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 21:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1025 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 234 KB; rules::ProcessConditionsCache: 222 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7056 KB; 2026-03-30 21:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1070 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 283 KB; rules::ProcessConditionsCache: 250 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7194 KB; 2026-03-30 21:16:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 21:16:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 21:16:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 21:16:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 21:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1085 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 294 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 224 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 17 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7199 KB; 2026-03-30 21:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1107 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 289 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 222 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7211 KB; 2026-03-30 21:18:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 21:11:36, To:, 2026-03-30 21:18:34, Duration (s):, 418, Events Per Second:, 0.755, Events:, 316, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 315, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38662 2026-03-30 21:18:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s761ms. 2026-03-30 21:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 689 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7083 KB; 2026-03-30 21:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 21:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 995 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 239 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7053 KB; 2026-03-30 21:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 240 KB; rules::ProcessConditionsCache: 226 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7050 KB; 2026-03-30 21:21:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 21:21:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 21:21:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 21:21:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 21:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1006 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 239 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7059 KB; 2026-03-30 21:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1029 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7146 KB; 2026-03-30 21:24:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1051 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7124 KB; 2026-03-30 21:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 21:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:25:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1088 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 288 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7239 KB; 2026-03-30 21:25:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 21:18:44, To:, 2026-03-30 21:25:34, Duration (s):, 410, Events Per Second:, 0.841, Events:, 345, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 344, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42380 2026-03-30 21:25:45 796759c136c0 Error: Error while sending request to server at "eu01.agent.edr.eset.systems:8093". Connection timed out (110) 2026-03-30 21:25:46 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s918ms. 2026-03-30 21:26:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 311 KB; rules::ProcessConditionsCache: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7146 KB; 2026-03-30 21:26:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 21:26:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 21:26:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 21:26:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 21:27:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7066 KB; 2026-03-30 21:28:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 991 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 245 KB; rules::ProcessConditionsCache: 234 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7024 KB; 2026-03-30 21:29:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 995 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; rules::ProcessConditionsCache: 240 KB; TcpIpConnectionsManager: 237 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7035 KB; 2026-03-30 21:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 21:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:30:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1051 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 297 KB; TcpIpConnectionsManager: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7217 KB; 2026-03-30 21:31:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1051 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7140 KB; 2026-03-30 21:31:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 21:31:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 21:31:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 21:31:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 21:32:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7152 KB; 2026-03-30 21:32:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 21:25:34, To:, 2026-03-30 21:32:34, Duration (s):, 420, Events Per Second:, 0.609, Events:, 256, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 253, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33028 2026-03-30 21:32:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s290ms. 2026-03-30 21:33:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 241 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6966 KB; 2026-03-30 21:34:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; rules::ProcessConditionsCache: 238 KB; TcpIpConnectionsManager: 209 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6946 KB; 2026-03-30 21:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:34:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 21:34:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:34:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:35:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 948 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; rules::ProcessConditionsCache: 243 KB; TcpIpConnectionsManager: 206 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6960 KB; 2026-03-30 21:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 269 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; TcpIpConnectionsManager: 209 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7007 KB; 2026-03-30 21:36:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 21:36:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 21:36:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 21:36:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 21:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7006 KB; 2026-03-30 21:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 985 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 240 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7069 KB; 2026-03-30 21:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1029 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 249 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 245 KB; TcpIpConnectionsManager: 240 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7101 KB; 2026-03-30 21:39:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 21:32:57, To:, 2026-03-30 21:39:34, Duration (s):, 397, Events Per Second:, 0.622, Events:, 247, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 246, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32038 2026-03-30 21:39:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s762ms. 2026-03-30 21:39:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:39:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 21:39:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:39:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 264 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7006 KB; 2026-03-30 21:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7001 KB; 2026-03-30 21:41:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 21:41:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 21:41:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 21:41:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 21:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 995 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 273 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7076 KB; 2026-03-30 21:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1011 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 257 KB; TcpIpConnectionsManager: 253 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7092 KB; 2026-03-30 21:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1058 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 336 KB; TcpIpConnectionsManager: 301 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7287 KB; 2026-03-30 21:44:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:44:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 21:44:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:44:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2556 KB; ProcessInfo: 1063 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 276 KB; rules::ProcessConditionsCache: 260 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 54 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7193 KB; 2026-03-30 21:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 260 KB; TcpIpConnectionsManager: 255 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7206 KB; 2026-03-30 21:46:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 21:39:44, To:, 2026-03-30 21:46:34, Duration (s):, 410, Events Per Second:, 0.792, Events:, 325, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 324, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40985 2026-03-30 21:46:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s146ms. 2026-03-30 21:46:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 21:46:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 21:46:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 21:46:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 21:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 357 KB; TcpIpConnectionsManager: 286 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7216 KB; 2026-03-30 21:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 266 KB; rules::ProcessConditionsCache: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 240 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7064 KB; 2026-03-30 21:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1032 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 316 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7215 KB; 2026-03-30 21:49:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:49:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 21:49:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:49:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 311 KB; rules::ProcessConditionsCache: 263 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7202 KB; 2026-03-30 21:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 368 KB; TcpIpConnectionsManager: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 257 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7394 KB; 2026-03-30 21:51:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 21:51:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 21:51:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 21:51:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 21:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 280 KB; rules::ProcessConditionsCache: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7250 KB; 2026-03-30 21:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 329 KB; TcpIpConnectionsManager: 304 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; cloudutils::CloudData: 176 KB; BaseEvent: 58 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7435 KB; 2026-03-30 21:53:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 21:46:33, To:, 2026-03-30 21:53:34, Duration (s):, 421, Events Per Second:, 1.308, Events:, 551, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 545, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 66979 2026-03-30 21:53:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s132ms. 2026-03-30 21:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 294 KB; rules::ProcessConditionsCache: 267 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7082 KB; 2026-03-30 21:54:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:54:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 21:54:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:54:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; rules::ProcessConditionsCache: 303 KB; TcpIpConnectionsManager: 281 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7145 KB; 2026-03-30 21:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 266 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7050 KB; 2026-03-30 21:56:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 21:56:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 21:56:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 21:56:58 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 21:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1104 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 344 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 303 KB; rules::ProcessConditionsCache: 293 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 26 KB; ExtendedTcpIpConnectionInfo: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7428 KB; 2026-03-30 21:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1126 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 340 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 282 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 175 KB; ProcessInfoCommandLineTag: 45 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 18 KB; BatchSerializer::EventsQueueTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7292 KB; 2026-03-30 21:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1126 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 113 KB; BaseEvent: 47 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7199 KB; 2026-03-30 21:59:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:59:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 21:59:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 21:59:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:00:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1126 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; TcpIpConnectionsManager: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 113 KB; BaseEvent: 48 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7190 KB; 2026-03-30 22:00:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 21:53:33, To:, 2026-03-30 22:00:34, Duration (s):, 421, Events Per Second:, 0.971, Events:, 409, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 401, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 7, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53070 2026-03-30 22:00:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s429ms. 2026-03-30 22:01:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; TcpIpConnectionsManager: 252 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 113 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6917 KB; 2026-03-30 22:01:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 22:01:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 22:01:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 22:01:59 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 22:02:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 113 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6887 KB; 2026-03-30 22:03:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 988 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 441 KB; CacheEntry: 372 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 113 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6887 KB; 2026-03-30 22:04:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1044 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 76 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6955 KB; 2026-03-30 22:04:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:04:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 22:04:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:04:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:05:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1069 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 291 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 249 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7054 KB; 2026-03-30 22:06:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1070 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 293 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7027 KB; 2026-03-30 22:07:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 22:07:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 22:07:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 22:07:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 22:07:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1082 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 242 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7000 KB; 2026-03-30 22:07:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 21:58:50, To:, 2026-03-30 22:07:34, Duration (s):, 524, Events Per Second:, 0.517, Events:, 271, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 270, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36741 2026-03-30 22:07:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s378ms. 2026-03-30 22:08:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 625 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 240 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 83 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6789 KB; 2026-03-30 22:09:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1025 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 280 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 258 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7108 KB; 2026-03-30 22:09:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:09:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 22:09:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:09:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:10:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1031 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 270 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6984 KB; 2026-03-30 22:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 281 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7024 KB; 2026-03-30 22:12:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 22:12:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 22:12:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 22:12:00 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 22:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 276 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 57 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7022 KB; 2026-03-30 22:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1079 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 257 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 133 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7082 KB; 2026-03-30 22:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1079 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 636 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 242 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7015 KB; 2026-03-30 22:14:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 22:07:55, To:, 2026-03-30 22:14:34, Duration (s):, 399, Events Per Second:, 1.079, Events:, 431, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 430, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53179 2026-03-30 22:14:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s835ms. 2026-03-30 22:14:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:14:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 22:14:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:14:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 638 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 91 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6775 KB; 2026-03-30 22:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 640 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 250 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 116 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6820 KB; 2026-03-30 22:17:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 22:17:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 22:17:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 22:17:01 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 22:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6800 KB; 2026-03-30 22:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 94 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6786 KB; 2026-03-30 22:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 628 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6796 KB; 2026-03-30 22:19:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:19:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 22:19:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:19:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 252 KB; TcpIpConnectionsManager: 222 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 140 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6885 KB; 2026-03-30 22:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 241 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6845 KB; 2026-03-30 22:21:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 22:15:00, To:, 2026-03-30 22:21:34, Duration (s):, 394, Events Per Second:, 0.355, Events:, 140, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 139, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19176 2026-03-30 22:21:35 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s307ms. 2026-03-30 22:22:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 22:22:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 22:22:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 22:22:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 22:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 243 KB; TcpIpConnectionsManager: 229 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 100 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6783 KB; 2026-03-30 22:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 912 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 246 KB; TcpIpConnectionsManager: 224 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6784 KB; 2026-03-30 22:24:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 917 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 247 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6779 KB; 2026-03-30 22:24:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:24:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 22:24:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:24:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:25:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 736 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 248 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6879 KB; 2026-03-30 22:26:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 777 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 251 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 103 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6928 KB; 2026-03-30 22:27:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 22:27:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 22:27:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 22:27:02 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 22:27:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 778 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 254 KB; TcpIpConnectionsManager: 209 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 118 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6955 KB; 2026-03-30 22:28:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 945 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; TcpIpConnectionsManager: 227 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 6845 KB; 2026-03-30 22:28:34 7967594126c0 Info: Events Statistics, From:, 2026-03-30 22:22:54, To:, 2026-03-30 22:28:34, Duration (s):, 340, Events Per Second:, 0.373, Events:, 127, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 126, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19096 2026-03-30 22:28:36 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s497ms. 2026-03-30 22:29:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 252 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 244 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 105 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6843 KB; 2026-03-30 22:29:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:29:52 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 22:29:52 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:29:52 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:30:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 286 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 262 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7046 KB; 2026-03-30 22:31:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1016 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 333 KB; TcpIpConnectionsManager: 317 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 293 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 48 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7315 KB; 2026-03-30 22:32:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 22:32:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 22:32:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 22:32:06 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 22:32:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1025 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 303 KB; TcpIpConnectionsManager: 301 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7340 KB; 2026-03-30 22:33:27 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 364 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 305 KB; TcpIpConnectionsManager: 301 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7356 KB; 2026-03-30 22:34:23 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 364 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 305 KB; TcpIpConnectionsManager: 294 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7352 KB; 2026-03-30 22:34:52 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:35:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 22:35:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:35:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:35:23 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 364 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 305 KB; TcpIpConnectionsManager: 294 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7355 KB; 2026-03-30 22:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; rules::ProcessConditionsCache: 405 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 305 KB; TcpIpConnectionsManager: 294 KB; cloudutils::CloudData: 176 KB; BatchStringTag: 63 KB; ProcessInfoCommandLineTag: 47 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; Total: 7461 KB; 2026-03-30 22:36:22 7967594126c0 Info: Events Statistics, From:, 2026-03-30 22:28:34, To:, 2026-03-30 22:35:34, Duration (s):, 420, Events Per Second:, 0.438, Events:, 184, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 175, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31979 2026-03-30 22:36:32 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s824ms. 2026-03-30 22:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 373 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 306 KB; TcpIpConnectionsManager: 298 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 45 KB; ExtendedTcpIpConnectionInfo: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7282 KB; 2026-03-30 22:37:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 22:37:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 22:37:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 22:37:24 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 22:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1038 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 363 KB; TcpIpConnectionsManager: 350 KB; rules::ProcessConditionsCache: 254 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; ExtendedTcpIpConnectionInfo: 27 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7374 KB; 2026-03-30 22:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1092 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 358 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 353 KB; rules::ProcessConditionsCache: 254 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; BaseEvent: 36 KB; ExtendedTcpIpConnectionInfo: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7456 KB; 2026-03-30 22:40:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:40:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 22:40:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:40:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1125 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 370 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 352 KB; rules::ProcessConditionsCache: 283 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 49 KB; ExtendedTcpIpConnectionInfo: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7546 KB; 2026-03-30 22:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1185 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 344 KB; TcpIpConnectionsManager: 334 KB; rules::ProcessConditionsCache: 329 KB; cloudutils::CloudData: 176 KB; BaseEvent: 80 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 27 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7640 KB; 2026-03-30 22:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1210 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 351 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; TcpIpConnectionsManager: 332 KB; cloudutils::CloudData: 176 KB; BaseEvent: 93 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 30 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7707 KB; 2026-03-30 22:42:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 22:42:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 22:42:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 22:42:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 22:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1216 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 355 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 350 KB; TcpIpConnectionsManager: 319 KB; cloudutils::CloudData: 176 KB; BaseEvent: 93 KB; ProcessInfoCommandLineTag: 56 KB; BatchSerializer::EventsQueueTag: 30 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7711 KB; 2026-03-30 22:43:25 7967594126c0 Info: Events Statistics, From:, 2026-03-30 22:30:54, To:, 2026-03-30 22:43:25, Duration (s):, 751, Events Per Second:, 0.915, Events:, 688, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 623, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 64, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 89664 2026-03-30 22:43:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s922ms. 2026-03-30 22:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1105 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 357 KB; TcpIpConnectionsManager: 347 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 122 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7298 KB; 2026-03-30 22:45:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:45:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 22:45:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:45:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1113 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 683 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 347 KB; TcpIpConnectionsManager: 340 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7226 KB; 2026-03-30 22:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1141 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 685 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 349 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7311 KB; 2026-03-30 22:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1167 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; TcpIpConnectionsManager: 376 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 350 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7357 KB; 2026-03-30 22:47:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 22:47:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 22:47:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 22:47:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 22:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1173 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 348 KB; TcpIpConnectionsManager: 347 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::ProcessConditionsCache: 45 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7289 KB; 2026-03-30 22:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1192 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 355 KB; TcpIpConnectionsManager: 342 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 46 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7340 KB; 2026-03-30 22:50:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:50:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 22:50:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:50:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1216 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; TcpIpConnectionsManager: 339 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 22 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7356 KB; 2026-03-30 22:50:25 7967594126c0 Info: Events Statistics, From:, 2026-03-30 22:43:20, To:, 2026-03-30 22:50:25, Duration (s):, 425, Events Per Second:, 1.036, Events:, 441, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 440, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53515 2026-03-30 22:50:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s492ms. 2026-03-30 22:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1032 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 350 KB; TcpIpConnectionsManager: 324 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7095 KB; 2026-03-30 22:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 352 KB; TcpIpConnectionsManager: 321 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 64 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7139 KB; 2026-03-30 22:52:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 22:52:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 22:52:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 22:52:27 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 22:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1070 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 349 KB; TcpIpConnectionsManager: 327 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 88 KB; ProcessInfoCommandLineTag: 47 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7207 KB; 2026-03-30 22:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1107 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 358 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 356 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7313 KB; 2026-03-30 22:55:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:55:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 22:55:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:55:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 22:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1113 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 345 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7230 KB; 2026-03-30 22:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1141 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 362 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7297 KB; 2026-03-30 22:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1145 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 344 KB; TcpIpConnectionsManager: 342 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 49 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchSerializer::EventsQueueTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7273 KB; 2026-03-30 22:57:25 7967594126c0 Info: Events Statistics, From:, 2026-03-30 22:50:19, To:, 2026-03-30 22:57:25, Duration (s):, 426, Events Per Second:, 0.787, Events:, 336, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 335, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41650 2026-03-30 22:57:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s529ms. 2026-03-30 22:57:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 22:57:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 22:57:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 22:57:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 22:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1063 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 358 KB; TcpIpConnectionsManager: 349 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 109 KB; ProcessInfoCommandLineTag: 45 KB; ExtendedTcpIpConnectionInfo: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7216 KB; 2026-03-30 22:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1081 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 472 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 349 KB; TcpIpConnectionsManager: 344 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7189 KB; 2026-03-30 23:00:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:00:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 23:00:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:00:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:00:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1104 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 349 KB; TcpIpConnectionsManager: 342 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7227 KB; 2026-03-30 23:01:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1111 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 352 KB; TcpIpConnectionsManager: 335 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7235 KB; 2026-03-30 23:02:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1114 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 351 KB; TcpIpConnectionsManager: 306 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 62 KB; ProcessInfoCommandLineTag: 48 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7213 KB; 2026-03-30 23:02:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 23:02:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 23:02:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 23:02:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 23:03:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1167 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 366 KB; TcpIpConnectionsManager: 335 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 137 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 36 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7402 KB; 2026-03-30 23:04:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1167 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 343 KB; TcpIpConnectionsManager: 339 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 63 KB; ProcessInfoCommandLineTag: 49 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7312 KB; 2026-03-30 23:04:25 7967594126c0 Info: Events Statistics, From:, 2026-03-30 22:57:30, To:, 2026-03-30 23:04:25, Duration (s):, 415, Events Per Second:, 0.907, Events:, 377, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 376, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46324 2026-03-30 23:04:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s824ms. 2026-03-30 23:05:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:05:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 23:05:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:05:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:05:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1029 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 343 KB; TcpIpConnectionsManager: 337 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 66 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7112 KB; 2026-03-30 23:06:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1032 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 348 KB; TcpIpConnectionsManager: 319 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7108 KB; 2026-03-30 23:07:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 347 KB; TcpIpConnectionsManager: 291 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7100 KB; 2026-03-30 23:07:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 23:07:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 23:07:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 23:07:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 23:08:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1050 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; TcpIpConnectionsManager: 294 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 64 KB; ProcessInfoCommandLineTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7095 KB; 2026-03-30 23:09:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; TcpIpConnectionsManager: 296 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7166 KB; 2026-03-30 23:10:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:10:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 23:10:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:10:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:10:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1229 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; TcpIpConnectionsManager: 349 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 347 KB; rules::ProcessConditionsCache: 204 KB; cloudutils::CloudData: 176 KB; BaseEvent: 78 KB; ProcessInfoCommandLineTag: 55 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7574 KB; 2026-03-30 23:11:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1358 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; TcpIpConnectionsManager: 396 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 341 KB; rules::ProcessConditionsCache: 338 KB; cloudutils::CloudData: 176 KB; BaseEvent: 141 KB; ProcessInfoCommandLineTag: 54 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7957 KB; 2026-03-30 23:11:25 7967594126c0 Info: Events Statistics, From:, 2026-03-30 23:04:27, To:, 2026-03-30 23:11:25, Duration (s):, 418, Events Per Second:, 2.173, Events:, 910, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 796, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 113, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 106866 2026-03-30 23:11:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s029ms. 2026-03-30 23:12:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; TcpIpConnectionsManager: 396 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; rules::ProcessConditionsCache: 337 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7696 KB; 2026-03-30 23:12:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 23:12:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 23:12:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 23:12:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 23:13:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 347 KB; rules::ProcessConditionsCache: 345 KB; TcpIpConnectionsManager: 340 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; ExtendedTcpIpConnectionInfo: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7667 KB; 2026-03-30 23:14:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1304 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 347 KB; TcpIpConnectionsManager: 307 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; ExtendedTcpIpConnectionInfo: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7673 KB; 2026-03-30 23:15:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:15:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 23:15:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:15:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:15:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2557 KB; ProcessInfo: 1318 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 348 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 348 KB; TcpIpConnectionsManager: 315 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; ExtendedTcpIpConnectionInfo: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7693 KB; 2026-03-30 23:16:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1326 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 355 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 349 KB; TcpIpConnectionsManager: 321 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; ExtendedTcpIpConnectionInfo: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7721 KB; 2026-03-30 23:17:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1335 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 351 KB; rules::ProcessConditionsCache: 348 KB; TcpIpConnectionsManager: 303 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7714 KB; 2026-03-30 23:17:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 23:17:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 23:17:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 23:17:28 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 23:18:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1346 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 357 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 354 KB; TcpIpConnectionsManager: 302 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7727 KB; 2026-03-30 23:18:25 7967594126c0 Info: Events Statistics, From:, 2026-03-30 23:11:43, To:, 2026-03-30 23:18:25, Duration (s):, 402, Events Per Second:, 0.494, Events:, 199, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 198, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26171 2026-03-30 23:18:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s683ms. 2026-03-30 23:19:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 357 KB; rules::ProcessConditionsCache: 356 KB; TcpIpConnectionsManager: 302 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7348 KB; 2026-03-30 23:20:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:20:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 23:20:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:20:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:20:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1017 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 351 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 349 KB; TcpIpConnectionsManager: 310 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7365 KB; 2026-03-30 23:21:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 360 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; TcpIpConnectionsManager: 312 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7401 KB; 2026-03-30 23:22:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1058 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 356 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 342 KB; TcpIpConnectionsManager: 331 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7447 KB; 2026-03-30 23:22:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 23:22:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 23:22:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 23:22:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 23:23:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1067 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 367 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; TcpIpConnectionsManager: 321 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; ExtendedTcpIpConnectionInfo: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7469 KB; 2026-03-30 23:24:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1079 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 367 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 351 KB; TcpIpConnectionsManager: 320 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7487 KB; 2026-03-30 23:25:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:25:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 23:25:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:25:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:25:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1100 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; rules::ProcessConditionsCache: 367 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; TcpIpConnectionsManager: 313 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7530 KB; 2026-03-30 23:25:25 7967594126c0 Info: Events Statistics, From:, 2026-03-30 23:18:25, To:, 2026-03-30 23:25:25, Duration (s):, 420, Events Per Second:, 0.670, Events:, 282, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 281, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36331 2026-03-30 23:25:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s412ms. 2026-03-30 23:26:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1026 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; rules::ProcessConditionsCache: 384 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; TcpIpConnectionsManager: 331 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7434 KB; 2026-03-30 23:27:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1123 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 344 KB; TcpIpConnectionsManager: 333 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 51 KB; rules::ProcessConditionsCache: 39 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7229 KB; 2026-03-30 23:27:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 23:27:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 23:27:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 23:27:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 23:28:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1136 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 349 KB; TcpIpConnectionsManager: 326 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 55 KB; ProcessInfoCommandLineTag: 50 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7251 KB; 2026-03-30 23:29:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1151 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 349 KB; TcpIpConnectionsManager: 325 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 50 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7277 KB; 2026-03-30 23:30:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:30:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 23:30:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:30:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:30:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2560 KB; ProcessInfo: 1163 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 374 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 349 KB; TcpIpConnectionsManager: 307 KB; cloudutils::CloudData: 176 KB; ProcessInfoCommandLineTag: 52 KB; rules::ProcessConditionsCache: 51 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7275 KB; 2026-03-30 23:31:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1177 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 350 KB; TcpIpConnectionsManager: 312 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 59 KB; ProcessInfoCommandLineTag: 53 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 22 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7317 KB; 2026-03-30 23:32:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1214 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 362 KB; TcpIpConnectionsManager: 338 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 125 KB; BaseEvent: 54 KB; ProcessInfoCommandLineTag: 52 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7467 KB; 2026-03-30 23:32:25 7967594126c0 Info: Events Statistics, From:, 2026-03-30 23:25:25, To:, 2026-03-30 23:32:25, Duration (s):, 420, Events Per Second:, 1.288, Events:, 542, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 519, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 11, Livegrid:, 11, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67382 2026-03-30 23:32:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s825ms. 2026-03-30 23:32:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 23:32:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 23:32:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 23:32:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 23:33:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1036 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 349 KB; TcpIpConnectionsManager: 331 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 67 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7132 KB; 2026-03-30 23:34:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 344 KB; TcpIpConnectionsManager: 339 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 69 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7162 KB; 2026-03-30 23:35:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:35:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 23:35:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:35:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:35:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 345 KB; TcpIpConnectionsManager: 331 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 58 KB; ProcessInfoCommandLineTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7162 KB; 2026-03-30 23:36:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1075 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 355 KB; TcpIpConnectionsManager: 315 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 84 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7200 KB; 2026-03-30 23:37:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1083 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 349 KB; TcpIpConnectionsManager: 303 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7185 KB; 2026-03-30 23:37:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 23:37:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 23:37:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 23:37:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 23:38:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1105 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 351 KB; TcpIpConnectionsManager: 318 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 89 KB; ProcessInfoCommandLineTag: 47 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7235 KB; 2026-03-30 23:39:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1177 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 354 KB; TcpIpConnectionsManager: 348 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 119 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7404 KB; 2026-03-30 23:39:25 7967594126c0 Info: Events Statistics, From:, 2026-03-30 23:32:25, To:, 2026-03-30 23:39:25, Duration (s):, 420, Events Per Second:, 0.958, Events:, 403, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 402, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53691 2026-03-30 23:39:26 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s819ms. 2026-03-30 23:40:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:40:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 23:40:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:40:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:40:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1086 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; TcpIpConnectionsManager: 339 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 81 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7226 KB; 2026-03-30 23:41:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 341 KB; TcpIpConnectionsManager: 330 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 65 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7192 KB; 2026-03-30 23:42:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1107 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 348 KB; TcpIpConnectionsManager: 321 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 87 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7233 KB; 2026-03-30 23:42:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 23:42:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 23:42:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 23:42:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 23:43:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1129 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; TcpIpConnectionsManager: 321 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 85 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7263 KB; 2026-03-30 23:44:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1133 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 347 KB; TcpIpConnectionsManager: 312 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 79 KB; ProcessInfoCommandLineTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7257 KB; 2026-03-30 23:45:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:45:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 23:45:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:45:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:45:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1139 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 684 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 349 KB; TcpIpConnectionsManager: 312 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 70 KB; ProcessInfoCommandLineTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7277 KB; 2026-03-30 23:46:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 685 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 350 KB; TcpIpConnectionsManager: 290 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 68 KB; ProcessInfoCommandLineTag: 56 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7264 KB; 2026-03-30 23:46:25 7967594126c0 Info: Events Statistics, From:, 2026-03-30 23:39:25, To:, 2026-03-30 23:46:25, Duration (s):, 420, Events Per Second:, 0.487, Events:, 205, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 204, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29059 2026-03-30 23:46:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s284ms. 2026-03-30 23:47:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 351 KB; TcpIpConnectionsManager: 290 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 73 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7052 KB; 2026-03-30 23:47:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 23:47:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 23:47:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 23:47:29 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 23:48:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 994 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 354 KB; TcpIpConnectionsManager: 287 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7049 KB; 2026-03-30 23:49:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 352 KB; TcpIpConnectionsManager: 292 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 71 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7058 KB; 2026-03-30 23:50:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:50:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 23:50:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:50:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:50:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1016 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 353 KB; TcpIpConnectionsManager: 295 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7095 KB; 2026-03-30 23:51:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1017 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 556 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 355 KB; TcpIpConnectionsManager: 297 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7103 KB; 2026-03-30 23:52:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1023 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 474 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 354 KB; TcpIpConnectionsManager: 290 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 78 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7103 KB; 2026-03-30 23:52:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 23:52:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 23:52:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 23:52:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 23:53:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1111 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 662 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 473 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 345 KB; TcpIpConnectionsManager: 328 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 157 KB; BaseEvent: 50 KB; ProcessInfoCommandLineTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7351 KB; 2026-03-30 23:53:25 7967594126c0 Info: Events Statistics, From:, 2026-03-30 23:46:24, To:, 2026-03-30 23:53:25, Duration (s):, 421, Events Per Second:, 0.837, Events:, 353, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 315, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43072 2026-03-30 23:53:27 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s107ms. 2026-03-30 23:54:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1172 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 473 KB; ModuleInfoCache: 442 KB; TcpIpConnectionsManager: 384 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 343 KB; rules::ProcessConditionsCache: 270 KB; cloudutils::CloudData: 176 KB; BaseEvent: 48 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7573 KB; 2026-03-30 23:55:02 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:55:02 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 172, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-03-30 23:55:02 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:55:02 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-03-30 23:55:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1202 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 555 KB; rules::RuleEvaluationCtx: 473 KB; ModuleInfoCache: 442 KB; TcpIpConnectionsManager: 408 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 348 KB; rules::ProcessConditionsCache: 289 KB; cloudutils::CloudData: 176 KB; BaseEvent: 55 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 7666 KB; 2026-03-30 23:56:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1232 KB; rules::RuleEvaluationCtx: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 442 KB; TcpIpConnectionsManager: 394 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 345 KB; rules::ProcessConditionsCache: 278 KB; cloudutils::CloudData: 176 KB; BaseEvent: 63 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchSerializer::EventsQueueTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8061 KB; 2026-03-30 23:57:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1239 KB; rules::RuleEvaluationCtx: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 346 KB; TcpIpConnectionsManager: 344 KB; rules::ProcessConditionsCache: 267 KB; cloudutils::CloudData: 176 KB; BaseEvent: 68 KB; ProcessInfoCommandLineTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 21 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8018 KB; 2026-03-30 23:57:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start 2026-03-30 23:57:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-03-30 23:57:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-03-30 23:57:30 796742bff6c0 Info: RulesEngineMemoryUsage. End 2026-03-30 23:58:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1255 KB; rules::RuleEvaluationCtx: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 345 KB; TcpIpConnectionsManager: 339 KB; rules::ProcessConditionsCache: 267 KB; cloudutils::CloudData: 176 KB; BaseEvent: 73 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8024 KB; 2026-03-30 23:59:22 796740bfb6c0 Info: Allocations: ModuleMetadata: 2562 KB; ProcessInfo: 1269 KB; rules::RuleEvaluationCtx: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 442 KB; CacheEntry: 375 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 347 KB; TcpIpConnectionsManager: 315 KB; rules::ProcessConditionsCache: 272 KB; cloudutils::CloudData: 176 KB; BaseEvent: 80 KB; ProcessInfoCommandLineTag: 46 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 8030 KB;