| Server IP : 172.67.191.97 / Your IP : 104.23.197.208 Web Server : Apache/2.4.63 (Ubuntu) System : Linux adminpruebas-Virtual-Machine 6.14.0-37-generic #37-Ubuntu SMP PREEMPT_DYNAMIC Fri Nov 14 22:10:32 UTC 2025 x86_64 User : www-data ( 33) PHP Version : 8.4.5 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /var/log/eset/eei/ |
Upload File : |
Version: 2.8.5555 (Oct 13 2025 18:38:28) Compiled with: Clang Version: 18.1.3 Npm: 10.8.2 HardwareInfo: CPU: IntelXeon, cores: 240, RAM: 7GB TelemetryId: Server d38ecbca8f660598256b227c9815089ffeddc553 2026-04-02 00:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1812 KB; rules::AncestorEvaluations: 555 KB; ModuleMetadata: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 252 KB; rules::ProcessConditionsCache: 202 KB; ModuleInfoCache: 103 KB; TcpIpConnectionsManager: 95 KB; CacheEntry: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 4258 KB; 2026-04-02 00:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1812 KB; rules::AncestorEvaluations: 555 KB; ModuleMetadata: 553 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 103 KB; TcpIpConnectionsManager: 95 KB; CacheEntry: 85 KB; BaseEvent: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4344 KB; 2026-04-02 00:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1812 KB; rules::AncestorEvaluations: 555 KB; ModuleMetadata: 553 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; TcpIpConnectionsManager: 84 KB; BaseEvent: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4335 KB; 2026-04-02 00:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1812 KB; rules::AncestorEvaluations: 555 KB; ModuleMetadata: 553 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; TcpIpConnectionsManager: 57 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4313 KB; 2026-04-02 00:03:35 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 00:03:35 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 00:03:35 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 00:03:35 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 00:03:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:03:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 00:03:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:03:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1812 KB; rules::AncestorEvaluations: 555 KB; ModuleMetadata: 553 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; TcpIpConnectionsManager: 57 KB; BaseEvent: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4312 KB; 2026-04-02 00:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1812 KB; rules::AncestorEvaluations: 555 KB; ModuleMetadata: 553 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; TcpIpConnectionsManager: 57 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4313 KB; 2026-04-02 00:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1814 KB; ProcessInfo: 1104 KB; rules::AncestorEvaluations: 555 KB; ModuleMetadata: 553 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; BaseEvent: 438 KB; TcpIpConnectionsManager: 417 KB; rules::ProcessConditionsCache: 275 KB; BatchSerializer::EventsQueueTag: 120 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6113 KB; 2026-04-02 00:06:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-01 23:59:17, To:, 2026-04-02 00:06:06, Duration (s):, 409, Events Per Second:, 6.183, Events:, 2529, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2013, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 80, Livegrid:, 80, OriginUrl:, 0, Alarms:, 355, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 277163 2026-04-02 00:06:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s102ms. 2026-04-02 00:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1814 KB; ProcessInfo: 1070 KB; rules::AncestorEvaluations: 556 KB; ModuleMetadata: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; TcpIpConnectionsManager: 417 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 5551 KB; 2026-04-02 00:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1814 KB; ProcessInfo: 1070 KB; rules::AncestorEvaluations: 556 KB; ModuleMetadata: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; TcpIpConnectionsManager: 417 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 5551 KB; 2026-04-02 00:08:35 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 00:08:35 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 00:08:35 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 00:08:35 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 00:08:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:08:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 00:08:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:08:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1814 KB; ProcessInfo: 1070 KB; rules::AncestorEvaluations: 556 KB; ModuleMetadata: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 5192 KB; 2026-04-02 00:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1814 KB; ProcessInfo: 1070 KB; rules::AncestorEvaluations: 556 KB; ModuleMetadata: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 37 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 5236 KB; 2026-04-02 00:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1814 KB; ProcessInfo: 1070 KB; rules::AncestorEvaluations: 556 KB; ModuleMetadata: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BaseEvent: 38 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 5237 KB; 2026-04-02 00:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1814 KB; ProcessInfo: 1070 KB; rules::AncestorEvaluations: 556 KB; ModuleMetadata: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BaseEvent: 38 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 5237 KB; 2026-04-02 00:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ProcessInfo: 1163 KB; ModuleMetadata: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::ProcessConditionsCache: 304 KB; ModuleInfoCache: 103 KB; TcpIpConnectionsManager: 97 KB; CacheEntry: 86 KB; BaseEvent: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 5409 KB; 2026-04-02 00:13:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 00:06:05, To:, 2026-04-02 00:13:06, Duration (s):, 421, Events Per Second:, 0.926, Events:, 390, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 259, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 65, Livegrid:, 65, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43911 2026-04-02 00:13:06 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s787ms. 2026-04-02 00:13:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 00:13:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 00:13:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 00:13:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 00:13:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:13:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 00:13:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:13:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 305 KB; ModuleInfoCache: 103 KB; TcpIpConnectionsManager: 98 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4478 KB; 2026-04-02 00:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 305 KB; TcpIpConnectionsManager: 110 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4511 KB; 2026-04-02 00:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 307 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 4472 KB; 2026-04-02 00:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 305 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 4468 KB; 2026-04-02 00:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 307 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 4465 KB; 2026-04-02 00:18:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 00:18:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 00:18:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 00:18:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 00:18:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:18:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 00:18:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:18:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 307 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 4467 KB; 2026-04-02 00:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 307 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 4470 KB; 2026-04-02 00:20:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 00:12:59, To:, 2026-04-02 00:20:06, Duration (s):, 427, Events Per Second:, 0.117, Events:, 50, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 47, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7906 2026-04-02 00:20:06 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s651ms. 2026-04-02 00:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 329 KB; ProcessInfo: 227 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4400 KB; 2026-04-02 00:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 316 KB; ProcessInfo: 227 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4340 KB; 2026-04-02 00:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 227 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4340 KB; 2026-04-02 00:23:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 00:23:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 00:23:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 00:23:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 00:23:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:23:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 00:23:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:23:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 229 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4373 KB; 2026-04-02 00:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 229 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4366 KB; 2026-04-02 00:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; rules::ProcessConditionsCache: 316 KB; ProcessInfo: 232 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 4362 KB; 2026-04-02 00:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; rules::ProcessConditionsCache: 316 KB; ProcessInfo: 232 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 4367 KB; 2026-04-02 00:27:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 00:20:04, To:, 2026-04-02 00:27:06, Duration (s):, 422, Events Per Second:, 0.121, Events:, 51, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 50, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8651 2026-04-02 00:27:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s576ms. 2026-04-02 00:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; rules::ProcessConditionsCache: 316 KB; ProcessInfo: 214 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4347 KB; 2026-04-02 00:28:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 00:28:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 00:28:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 00:28:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 00:28:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:28:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 00:28:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:28:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; rules::ProcessConditionsCache: 316 KB; ProcessInfo: 214 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4351 KB; 2026-04-02 00:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 316 KB; ProcessInfo: 214 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4353 KB; 2026-04-02 00:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 325 KB; ProcessInfo: 220 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4374 KB; 2026-04-02 00:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 327 KB; ProcessInfo: 220 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4379 KB; 2026-04-02 00:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; rules::ProcessConditionsCache: 333 KB; ProcessInfo: 221 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4394 KB; 2026-04-02 00:33:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 00:33:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 00:33:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 00:33:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 00:33:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:33:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 00:33:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:33:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 265 KB; TcpIpConnectionsManager: 110 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::ProcessConditionsCache: 43 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4206 KB; 2026-04-02 00:34:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 00:30:10, To:, 2026-04-02 00:34:06, Duration (s):, 236, Events Per Second:, 0.559, Events:, 132, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 131, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16696 2026-04-02 00:34:06 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s729ms. 2026-04-02 00:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 258 KB; TcpIpConnectionsManager: 110 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 39 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4170 KB; 2026-04-02 00:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 284 KB; TcpIpConnectionsManager: 134 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 39 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 4211 KB; 2026-04-02 00:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 284 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 39 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 4170 KB; 2026-04-02 00:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 284 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 39 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4163 KB; 2026-04-02 00:38:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 00:38:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 00:38:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 00:38:36 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 00:38:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:38:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 00:38:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:38:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 284 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 39 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 4144 KB; 2026-04-02 00:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 329 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::ProcessConditionsCache: 41 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4221 KB; 2026-04-02 00:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 334 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 59 KB; rules::ProcessConditionsCache: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4243 KB; 2026-04-02 00:41:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 00:34:02, To:, 2026-04-02 00:41:06, Duration (s):, 424, Events Per Second:, 0.491, Events:, 208, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 207, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27471 2026-04-02 00:41:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s186ms. 2026-04-02 00:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 106 KB; TcpIpConnectionsManager: 103 KB; CacheEntry: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 39 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4403 KB; 2026-04-02 00:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ProcessInfo: 741 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; TcpIpConnectionsManager: 307 KB; BaseEvent: 212 KB; rules::ProcessConditionsCache: 181 KB; ModuleInfoCache: 106 KB; CacheEntry: 89 KB; BatchSerializer::EventsQueueTag: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 5274 KB; 2026-04-02 00:43:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 00:43:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 00:43:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 00:43:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 00:43:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:43:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 00:43:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:43:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ProcessInfo: 1009 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; TcpIpConnectionsManager: 417 KB; BaseEvent: 347 KB; ModuleInfoCache: 106 KB; BatchSerializer::EventsQueueTag: 93 KB; CacheEntry: 89 KB; rules::ProcessConditionsCache: 54 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 5682 KB; 2026-04-02 00:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ProcessInfo: 1009 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; TcpIpConnectionsManager: 403 KB; BaseEvent: 348 KB; ModuleInfoCache: 106 KB; BatchSerializer::EventsQueueTag: 93 KB; CacheEntry: 89 KB; rules::ProcessConditionsCache: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 5682 KB; 2026-04-02 00:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ProcessInfo: 1010 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; BaseEvent: 350 KB; TcpIpConnectionsManager: 211 KB; ModuleInfoCache: 106 KB; BatchSerializer::EventsQueueTag: 95 KB; CacheEntry: 89 KB; rules::ProcessConditionsCache: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 5485 KB; 2026-04-02 00:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ProcessInfo: 1017 KB; ModuleMetadata: 610 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; BaseEvent: 384 KB; ModuleInfoCache: 110 KB; BatchSerializer::EventsQueueTag: 104 KB; CacheEntry: 94 KB; rules::ProcessConditionsCache: 74 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 5446 KB; 2026-04-02 00:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ProcessInfo: 1017 KB; ModuleMetadata: 610 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; BaseEvent: 384 KB; ModuleInfoCache: 110 KB; BatchSerializer::EventsQueueTag: 104 KB; CacheEntry: 94 KB; rules::ProcessConditionsCache: 74 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 5446 KB; 2026-04-02 00:48:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 00:41:44, To:, 2026-04-02 00:48:06, Duration (s):, 382, Events Per Second:, 5.656, Events:, 2161, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1719, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 56, Livegrid:, 56, OriginUrl:, 0, Alarms:, 329, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 235938 2026-04-02 00:48:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s882ms. 2026-04-02 00:48:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 00:48:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 00:48:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 00:48:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 00:48:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:48:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 00:48:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:48:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 610 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 218 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; rules::ProcessConditionsCache: 73 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4149 KB; 2026-04-02 00:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 610 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 218 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; rules::ProcessConditionsCache: 73 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4149 KB; 2026-04-02 00:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 610 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 218 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; rules::ProcessConditionsCache: 73 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4149 KB; 2026-04-02 00:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 610 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 112 KB; ModuleInfoCache: 110 KB; TcpIpConnectionsManager: 100 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 4353 KB; 2026-04-02 00:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 610 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 112 KB; ModuleInfoCache: 110 KB; TcpIpConnectionsManager: 100 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 4357 KB; 2026-04-02 00:53:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 00:53:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 00:53:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 00:53:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 00:53:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:53:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 00:53:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:53:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 112 KB; ModuleInfoCache: 110 KB; TcpIpConnectionsManager: 100 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 4362 KB; 2026-04-02 00:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 112 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4321 KB; 2026-04-02 00:55:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 00:46:25, To:, 2026-04-02 00:55:06, Duration (s):, 521, Events Per Second:, 0.424, Events:, 221, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 220, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30659 2026-04-02 00:55:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s995ms. 2026-04-02 00:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 221 KB; rules::ProcessConditionsCache: 117 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4225 KB; 2026-04-02 00:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 233 KB; rules::ProcessConditionsCache: 122 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 4259 KB; 2026-04-02 00:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 240 KB; rules::ProcessConditionsCache: 124 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 4280 KB; 2026-04-02 00:58:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 00:58:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 00:58:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 00:58:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 00:58:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:58:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 00:58:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:58:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 00:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 251 KB; rules::ProcessConditionsCache: 119 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4291 KB; 2026-04-02 01:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 274 KB; rules::ProcessConditionsCache: 122 KB; ModuleInfoCache: 110 KB; TcpIpConnectionsManager: 103 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 4340 KB; 2026-04-02 01:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 135 KB; ModuleInfoCache: 110 KB; TcpIpConnectionsManager: 103 KB; CacheEntry: 94 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 4421 KB; 2026-04-02 01:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 141 KB; ModuleInfoCache: 110 KB; TcpIpConnectionsManager: 95 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 42 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 4439 KB; 2026-04-02 01:02:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 00:55:19, To:, 2026-04-02 01:02:06, Duration (s):, 407, Events Per Second:, 0.619, Events:, 252, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 213, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 19, Livegrid:, 19, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30820 2026-04-02 01:02:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s316ms. 2026-04-02 01:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 133 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4318 KB; 2026-04-02 01:03:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 01:03:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 01:03:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 01:03:37 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 01:03:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:03:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 01:03:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:03:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 133 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4315 KB; 2026-04-02 01:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 133 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4315 KB; 2026-04-02 01:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 135 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4302 KB; 2026-04-02 01:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 135 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4306 KB; 2026-04-02 01:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 135 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4306 KB; 2026-04-02 01:08:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 01:08:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 01:08:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 01:08:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 01:08:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:08:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 01:08:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:08:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 135 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4309 KB; 2026-04-02 01:09:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 01:02:04, To:, 2026-04-02 01:09:06, Duration (s):, 422, Events Per Second:, 0.325, Events:, 137, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 136, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18459 2026-04-02 01:09:06 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s653ms. 2026-04-02 01:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 261 KB; rules::ProcessConditionsCache: 140 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4308 KB; 2026-04-02 01:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 145 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4318 KB; 2026-04-02 01:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 145 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4321 KB; 2026-04-02 01:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 145 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4364 KB; 2026-04-02 01:13:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 01:13:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 01:13:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 01:13:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 01:13:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:13:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 01:13:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:13:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 145 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4388 KB; 2026-04-02 01:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 145 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4388 KB; 2026-04-02 01:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 149 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 4376 KB; 2026-04-02 01:16:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 01:10:00, To:, 2026-04-02 01:16:06, Duration (s):, 366, Events Per Second:, 0.134, Events:, 49, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 48, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7579 2026-04-02 01:16:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s405ms. 2026-04-02 01:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 229 KB; rules::ProcessConditionsCache: 146 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4294 KB; 2026-04-02 01:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 235 KB; rules::ProcessConditionsCache: 150 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4311 KB; 2026-04-02 01:18:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 01:18:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 01:18:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 01:18:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 01:18:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:18:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 01:18:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:18:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 235 KB; rules::ProcessConditionsCache: 150 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4302 KB; 2026-04-02 01:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 240 KB; rules::ProcessConditionsCache: 157 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4318 KB; 2026-04-02 01:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 240 KB; rules::ProcessConditionsCache: 157 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4323 KB; 2026-04-02 01:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 240 KB; rules::ProcessConditionsCache: 157 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4302 KB; 2026-04-02 01:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 240 KB; rules::ProcessConditionsCache: 157 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4308 KB; 2026-04-02 01:23:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 01:16:36, To:, 2026-04-02 01:23:06, Duration (s):, 390, Events Per Second:, 0.074, Events:, 29, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 28, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 5568 2026-04-02 01:23:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s858ms. 2026-04-02 01:23:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 01:23:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 01:23:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 01:23:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 01:23:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:23:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 01:23:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:23:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 218 KB; rules::ProcessConditionsCache: 158 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4288 KB; 2026-04-02 01:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 218 KB; rules::ProcessConditionsCache: 158 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4291 KB; 2026-04-02 01:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 223 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4288 KB; 2026-04-02 01:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 223 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4289 KB; 2026-04-02 01:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 224 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4289 KB; 2026-04-02 01:28:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 01:28:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 01:28:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 01:28:38 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 01:28:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:28:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 01:28:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:28:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 226 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4294 KB; 2026-04-02 01:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 227 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4299 KB; 2026-04-02 01:30:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 01:23:26, To:, 2026-04-02 01:30:06, Duration (s):, 400, Events Per Second:, 0.060, Events:, 24, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 23, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 4245 2026-04-02 01:30:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s585ms. 2026-04-02 01:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 224 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4305 KB; 2026-04-02 01:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 224 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4306 KB; 2026-04-02 01:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 224 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4309 KB; 2026-04-02 01:33:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 01:33:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 01:33:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 01:33:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 01:33:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:33:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 01:33:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:33:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 224 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4313 KB; 2026-04-02 01:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 224 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4316 KB; 2026-04-02 01:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 227 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4278 KB; 2026-04-02 01:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 227 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4286 KB; 2026-04-02 01:37:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 01:30:14, To:, 2026-04-02 01:37:06, Duration (s):, 412, Events Per Second:, 0.049, Events:, 20, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 19, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 3662 2026-04-02 01:37:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s571ms. 2026-04-02 01:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 218 KB; rules::ProcessConditionsCache: 166 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4278 KB; 2026-04-02 01:38:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 01:38:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 01:38:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 01:38:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 01:38:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:38:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 01:38:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:38:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ModuleMetadata: 620 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; TcpIpConnectionsManager: 200 KB; BaseEvent: 154 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; rules::ProcessConditionsCache: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 42 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 4854 KB; 2026-04-02 01:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1820 KB; ProcessInfo: 956 KB; ModuleMetadata: 620 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; TcpIpConnectionsManager: 362 KB; BaseEvent: 340 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 91 KB; rules::ProcessConditionsCache: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 5665 KB; 2026-04-02 01:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ProcessInfo: 1320 KB; ModuleMetadata: 620 KB; rules::AncestorEvaluations: 556 KB; BaseEvent: 515 KB; TcpIpConnectionsManager: 513 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; BatchSerializer::EventsQueueTag: 138 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; rules::ProcessConditionsCache: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 8070 KB; 2026-04-02 01:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ProcessInfo: 1418 KB; ModuleMetadata: 620 KB; BaseEvent: 565 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; TcpIpConnectionsManager: 412 KB; rules::ProcessConditionsCache: 198 KB; BatchSerializer::EventsQueueTag: 151 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 8246 KB; 2026-04-02 01:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ProcessInfo: 1429 KB; ModuleMetadata: 620 KB; BaseEvent: 571 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; TcpIpConnectionsManager: 261 KB; rules::ProcessConditionsCache: 205 KB; BatchSerializer::EventsQueueTag: 153 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 8118 KB; 2026-04-02 01:43:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 01:43:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 01:43:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 01:43:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 01:43:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:43:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 01:43:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:43:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ProcessInfo: 1468 KB; ModuleMetadata: 620 KB; BaseEvent: 587 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; rules::ProcessConditionsCache: 245 KB; BatchSerializer::EventsQueueTag: 158 KB; TcpIpConnectionsManager: 133 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 8095 KB; 2026-04-02 01:44:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 01:37:56, To:, 2026-04-02 01:44:06, Duration (s):, 370, Events Per Second:, 9.125, Events:, 3377, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2828, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 548, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 374475 2026-04-02 01:44:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s533ms. 2026-04-02 01:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 620 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 229 KB; ModuleInfoCache: 111 KB; TcpIpConnectionsManager: 106 KB; CacheEntry: 95 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6145 KB; 2026-04-02 01:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 620 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 231 KB; ModuleInfoCache: 111 KB; TcpIpConnectionsManager: 97 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6134 KB; 2026-04-02 01:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 620 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 231 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6129 KB; 2026-04-02 01:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 620 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 340 KB; rules::ProcessConditionsCache: 242 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6152 KB; 2026-04-02 01:48:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 01:48:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 01:48:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 01:48:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 01:48:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:48:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 01:48:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:48:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 620 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 392 KB; rules::ProcessConditionsCache: 308 KB; TcpIpConnectionsManager: 128 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6347 KB; 2026-04-02 01:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 625 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 418 KB; rules::ProcessConditionsCache: 270 KB; TcpIpConnectionsManager: 126 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 42 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6345 KB; 2026-04-02 01:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 625 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 423 KB; rules::ProcessConditionsCache: 275 KB; TcpIpConnectionsManager: 121 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 42 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6352 KB; 2026-04-02 01:51:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 01:44:00, To:, 2026-04-02 01:51:06, Duration (s):, 426, Events Per Second:, 0.697, Events:, 297, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 284, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37338 2026-04-02 01:51:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s065ms. 2026-04-02 01:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 625 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 276 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6163 KB; 2026-04-02 01:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 625 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 273 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6137 KB; 2026-04-02 01:53:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 01:53:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 01:53:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 01:53:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 01:53:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:53:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 01:53:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:53:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 272 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6144 KB; 2026-04-02 01:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 303 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6226 KB; 2026-04-02 01:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 277 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6190 KB; 2026-04-02 01:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 277 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6196 KB; 2026-04-02 01:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 277 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6212 KB; 2026-04-02 01:58:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 01:52:56, To:, 2026-04-02 01:58:06, Duration (s):, 310, Events Per Second:, 0.222, Events:, 69, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 68, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10042 2026-04-02 01:58:06 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s708ms. 2026-04-02 01:58:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 01:58:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 01:58:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 01:58:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 01:58:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:58:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 01:58:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:58:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 01:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 279 KB; ProcessInfo: 243 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6106 KB; 2026-04-02 02:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::ProcessConditionsCache: 274 KB; ProcessInfo: 243 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6103 KB; 2026-04-02 02:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 287 KB; ProcessInfo: 257 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6139 KB; 2026-04-02 02:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 287 KB; ProcessInfo: 262 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6123 KB; 2026-04-02 02:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; rules::ProcessConditionsCache: 290 KB; ProcessInfo: 265 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6134 KB; 2026-04-02 02:03:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 02:03:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 02:03:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 02:03:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 02:03:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:03:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 02:03:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:03:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 287 KB; ProcessInfo: 265 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6136 KB; 2026-04-02 02:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; rules::ProcessConditionsCache: 287 KB; ProcessInfo: 276 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6147 KB; 2026-04-02 02:05:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 01:58:38, To:, 2026-04-02 02:05:06, Duration (s):, 388, Events Per Second:, 0.309, Events:, 120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 119, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16985 2026-04-02 02:05:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s751ms. 2026-04-02 02:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; rules::ProcessConditionsCache: 287 KB; ProcessInfo: 236 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6076 KB; 2026-04-02 02:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; rules::ProcessConditionsCache: 287 KB; ProcessInfo: 236 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6081 KB; 2026-04-02 02:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 287 KB; ProcessInfo: 236 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6070 KB; 2026-04-02 02:08:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 02:08:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 02:08:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 02:08:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 02:08:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:08:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 02:08:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:08:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 290 KB; ProcessInfo: 237 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6079 KB; 2026-04-02 02:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; rules::ProcessConditionsCache: 294 KB; ProcessInfo: 292 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6171 KB; 2026-04-02 02:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 298 KB; ProcessInfo: 298 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6206 KB; 2026-04-02 02:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 298 KB; ProcessInfo: 298 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6211 KB; 2026-04-02 02:12:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 02:05:08, To:, 2026-04-02 02:12:06, Duration (s):, 418, Events Per Second:, 0.395, Events:, 165, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 164, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21769 2026-04-02 02:12:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s171ms. 2026-04-02 02:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 298 KB; ProcessInfo: 277 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6160 KB; 2026-04-02 02:13:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 02:13:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 02:13:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 02:13:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 02:13:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:13:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 02:13:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:13:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 300 KB; ProcessInfo: 277 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6170 KB; 2026-04-02 02:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 300 KB; ProcessInfo: 277 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6172 KB; 2026-04-02 02:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; rules::ProcessConditionsCache: 305 KB; ProcessInfo: 280 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6170 KB; 2026-04-02 02:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 307 KB; ProcessInfo: 284 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6182 KB; 2026-04-02 02:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 309 KB; ProcessInfo: 287 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6187 KB; 2026-04-02 02:18:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 02:18:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 02:18:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 02:18:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 02:18:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:18:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 02:18:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:18:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 311 KB; ProcessInfo: 299 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6216 KB; 2026-04-02 02:19:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 02:13:02, To:, 2026-04-02 02:19:06, Duration (s):, 364, Events Per Second:, 0.135, Events:, 49, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 48, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7471 2026-04-02 02:19:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s763ms. 2026-04-02 02:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 245 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6154 KB; 2026-04-02 02:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 248 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6160 KB; 2026-04-02 02:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 311 KB; ProcessInfo: 248 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6147 KB; 2026-04-02 02:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 311 KB; ProcessInfo: 248 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6149 KB; 2026-04-02 02:23:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 02:23:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 02:23:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 02:23:39 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 02:23:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:23:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 02:23:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:23:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; rules::ProcessConditionsCache: 311 KB; ProcessInfo: 258 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6151 KB; 2026-04-02 02:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 311 KB; ProcessInfo: 258 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6153 KB; 2026-04-02 02:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 262 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6150 KB; 2026-04-02 02:26:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 02:19:51, To:, 2026-04-02 02:26:06, Duration (s):, 375, Events Per Second:, 0.155, Events:, 58, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 57, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9191 2026-04-02 02:26:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s160ms. 2026-04-02 02:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 239 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6107 KB; 2026-04-02 02:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 240 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6111 KB; 2026-04-02 02:28:40 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 02:28:40 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 02:28:40 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 02:28:40 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 02:28:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:28:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 02:28:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:28:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 240 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6114 KB; 2026-04-02 02:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 240 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6116 KB; 2026-04-02 02:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; rules::ProcessConditionsCache: 318 KB; ProcessInfo: 245 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6129 KB; 2026-04-02 02:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; rules::ProcessConditionsCache: 318 KB; ProcessInfo: 245 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6130 KB; 2026-04-02 02:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; rules::ProcessConditionsCache: 318 KB; ProcessInfo: 245 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6134 KB; 2026-04-02 02:33:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 02:27:23, To:, 2026-04-02 02:33:06, Duration (s):, 343, Events Per Second:, 0.050, Events:, 17, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 16, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 3170 2026-04-02 02:33:06 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s491ms. 2026-04-02 02:33:41 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 02:33:41 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 02:33:41 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 02:33:41 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 02:33:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:33:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 02:33:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:33:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; rules::ProcessConditionsCache: 320 KB; ProcessInfo: 233 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6125 KB; 2026-04-02 02:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 318 KB; ProcessInfo: 233 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6125 KB; 2026-04-02 02:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; rules::ProcessConditionsCache: 320 KB; ProcessInfo: 235 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6117 KB; 2026-04-02 02:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; rules::ProcessConditionsCache: 320 KB; ProcessInfo: 235 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6118 KB; 2026-04-02 02:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 282 KB; ModuleInfoCache: 114 KB; TcpIpConnectionsManager: 108 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::ProcessConditionsCache: 54 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 5956 KB; 2026-04-02 02:38:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 02:38:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 02:38:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 02:38:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 02:38:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:38:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 02:38:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:38:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 283 KB; ModuleInfoCache: 114 KB; TcpIpConnectionsManager: 108 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 43 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 5931 KB; 2026-04-02 02:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 342 KB; TcpIpConnectionsManager: 126 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6062 KB; 2026-04-02 02:40:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 02:32:57, To:, 2026-04-02 02:40:06, Duration (s):, 429, Events Per Second:, 0.720, Events:, 309, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 308, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38159 2026-04-02 02:40:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s950ms. 2026-04-02 02:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 336 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 87 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 5977 KB; 2026-04-02 02:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 343 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 85 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 5990 KB; 2026-04-02 02:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 355 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 85 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6007 KB; 2026-04-02 02:43:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 02:43:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 02:43:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 02:43:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 02:43:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:43:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 02:43:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:43:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 364 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 49 KB; cloudutils::CloudData: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6020 KB; 2026-04-02 02:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 368 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 87 KB; rules::ProcessConditionsCache: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6066 KB; 2026-04-02 02:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 380 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 82 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6047 KB; 2026-04-02 02:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 380 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 72 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6042 KB; 2026-04-02 02:47:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 02:40:00, To:, 2026-04-02 02:47:06, Duration (s):, 426, Events Per Second:, 0.289, Events:, 123, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 122, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16540 2026-04-02 02:47:06 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s711ms. 2026-04-02 02:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 242 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::ProcessConditionsCache: 50 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 5879 KB; 2026-04-02 02:48:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 02:48:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 02:48:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 02:48:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 02:48:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:48:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 02:48:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:48:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 242 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::ProcessConditionsCache: 50 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 5908 KB; 2026-04-02 02:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 242 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::ProcessConditionsCache: 50 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 5932 KB; 2026-04-02 02:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 246 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; TcpIpConnectionsManager: 57 KB; rules::ProcessConditionsCache: 57 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 5947 KB; 2026-04-02 02:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 246 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 57 KB; rules::ProcessConditionsCache: 57 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 5951 KB; 2026-04-02 02:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 626 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 246 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 57 KB; rules::ProcessConditionsCache: 57 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 5952 KB; 2026-04-02 02:53:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 02:53:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 02:53:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 02:53:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 02:53:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:53:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 02:53:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:53:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 252 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; rules::ProcessConditionsCache: 61 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6004 KB; 2026-04-02 02:54:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 02:50:03, To:, 2026-04-02 02:54:06, Duration (s):, 243, Events Per Second:, 0.452, Events:, 110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 27, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 41, Livegrid:, 41, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 11463 2026-04-02 02:54:06 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s746ms. 2026-04-02 02:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 230 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; rules::ProcessConditionsCache: 60 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 5954 KB; 2026-04-02 02:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 230 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; rules::ProcessConditionsCache: 60 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 5954 KB; 2026-04-02 02:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 230 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; rules::ProcessConditionsCache: 60 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 5954 KB; 2026-04-02 02:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3484 KB; ModuleMetadata: 635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 230 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; rules::ProcessConditionsCache: 60 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 5954 KB; 2026-04-02 02:58:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 02:58:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 02:58:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 02:58:42 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 02:58:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:58:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 02:58:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:58:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 02:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1167 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BaseEvent: 394 KB; TcpIpConnectionsManager: 389 KB; rules::ProcessConditionsCache: 131 KB; ModuleInfoCache: 115 KB; BatchSerializer::EventsQueueTag: 112 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; cloudutils::CloudData: 44 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7903 KB; 2026-04-02 03:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1343 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; BaseEvent: 476 KB; TcpIpConnectionsManager: 466 KB; rules::ProcessConditionsCache: 330 KB; BatchSerializer::EventsQueueTag: 135 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 44 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 8461 KB; 2026-04-02 03:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1393 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; BaseEvent: 486 KB; TcpIpConnectionsManager: 466 KB; rules::ProcessConditionsCache: 363 KB; BatchSerializer::EventsQueueTag: 140 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 44 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 8568 KB; 2026-04-02 03:01:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 02:53:11, To:, 2026-04-02 03:01:06, Duration (s):, 475, Events Per Second:, 6.507, Events:, 3092, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2667, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 422, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 349309 2026-04-02 03:01:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s744ms. 2026-04-02 03:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1387 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 363 KB; TcpIpConnectionsManager: 133 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 44 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7600 KB; 2026-04-02 03:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1387 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 363 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 7525 KB; 2026-04-02 03:03:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 03:03:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 03:03:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 03:03:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 03:03:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:03:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 03:03:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:03:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1387 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 363 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7526 KB; 2026-04-02 03:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1387 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 363 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7526 KB; 2026-04-02 03:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1387 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 363 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7526 KB; 2026-04-02 03:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1414 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::ProcessConditionsCache: 385 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 44 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 7598 KB; 2026-04-02 03:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1414 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; rules::ProcessConditionsCache: 385 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 44 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7599 KB; 2026-04-02 03:08:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 03:00:55, To:, 2026-04-02 03:08:06, Duration (s):, 431, Events Per Second:, 0.144, Events:, 62, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 61, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9805 2026-04-02 03:08:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s878ms. 2026-04-02 03:08:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 03:08:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 03:08:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 03:08:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 03:08:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:08:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 03:08:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:08:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::ProcessConditionsCache: 388 KB; ProcessInfo: 257 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6403 KB; 2026-04-02 03:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 392 KB; ProcessInfo: 301 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6475 KB; 2026-04-02 03:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 401 KB; ProcessInfo: 312 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; TcpIpConnectionsManager: 64 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6515 KB; 2026-04-02 03:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 401 KB; ProcessInfo: 315 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; TcpIpConnectionsManager: 64 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6492 KB; 2026-04-02 03:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 401 KB; ProcessInfo: 317 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6499 KB; 2026-04-02 03:13:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 03:13:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 03:13:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 03:13:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 03:13:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:13:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 03:13:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:13:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::ProcessConditionsCache: 401 KB; ProcessInfo: 320 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; TcpIpConnectionsManager: 64 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6505 KB; 2026-04-02 03:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::ProcessConditionsCache: 401 KB; ProcessInfo: 320 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; TcpIpConnectionsManager: 62 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6501 KB; 2026-04-02 03:15:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 03:08:10, To:, 2026-04-02 03:15:06, Duration (s):, 416, Events Per Second:, 0.423, Events:, 176, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 175, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22737 2026-04-02 03:15:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s371ms. 2026-04-02 03:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::ProcessConditionsCache: 402 KB; ProcessInfo: 239 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6387 KB; 2026-04-02 03:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::ProcessConditionsCache: 400 KB; ProcessInfo: 239 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6380 KB; 2026-04-02 03:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::ProcessConditionsCache: 402 KB; ProcessInfo: 242 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6389 KB; 2026-04-02 03:18:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 03:18:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 03:18:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 03:18:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 03:18:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:18:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 03:18:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:18:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 402 KB; ProcessInfo: 242 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6377 KB; 2026-04-02 03:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 405 KB; ProcessInfo: 243 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6384 KB; 2026-04-02 03:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 413 KB; ProcessInfo: 249 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6411 KB; 2026-04-02 03:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 411 KB; ProcessInfo: 249 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6429 KB; 2026-04-02 03:22:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 03:15:03, To:, 2026-04-02 03:22:06, Duration (s):, 423, Events Per Second:, 0.064, Events:, 27, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 26, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 4919 2026-04-02 03:22:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s468ms. 2026-04-02 03:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::ProcessConditionsCache: 411 KB; ProcessInfo: 237 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6415 KB; 2026-04-02 03:23:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 03:23:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 03:23:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 03:23:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 03:23:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:23:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 03:23:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:23:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::ProcessConditionsCache: 411 KB; ProcessInfo: 239 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 72 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6420 KB; 2026-04-02 03:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::ProcessConditionsCache: 411 KB; ProcessInfo: 239 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 74 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6422 KB; 2026-04-02 03:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::ProcessConditionsCache: 413 KB; ProcessInfo: 240 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6429 KB; 2026-04-02 03:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::ProcessConditionsCache: 413 KB; ProcessInfo: 240 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 77 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6431 KB; 2026-04-02 03:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::ProcessConditionsCache: 413 KB; ProcessInfo: 240 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 77 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6433 KB; 2026-04-02 03:28:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 03:28:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 03:28:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 03:28:43 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 03:28:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:28:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 03:28:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:28:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::ProcessConditionsCache: 413 KB; ProcessInfo: 240 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 79 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6420 KB; 2026-04-02 03:29:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 03:22:56, To:, 2026-04-02 03:29:06, Duration (s):, 370, Events Per Second:, 0.027, Events:, 10, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 9, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 2299 2026-04-02 03:29:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s378ms. 2026-04-02 03:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::ProcessConditionsCache: 416 KB; ProcessInfo: 235 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6422 KB; 2026-04-02 03:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 251 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 44 KB; rules::ProcessConditionsCache: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6022 KB; 2026-04-02 03:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 251 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 44 KB; rules::ProcessConditionsCache: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6026 KB; 2026-04-02 03:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 251 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 44 KB; rules::ProcessConditionsCache: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6029 KB; 2026-04-02 03:33:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 03:33:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 03:33:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 03:33:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 03:33:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:33:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 03:33:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:33:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 251 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 6022 KB; 2026-04-02 03:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 251 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6047 KB; 2026-04-02 03:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 252 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6055 KB; 2026-04-02 03:36:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 03:29:04, To:, 2026-04-02 03:36:06, Duration (s):, 422, Events Per Second:, 0.133, Events:, 56, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 55, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8591 2026-04-02 03:36:06 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s673ms. 2026-04-02 03:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 233 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6035 KB; 2026-04-02 03:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 233 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6031 KB; 2026-04-02 03:38:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 03:38:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 03:38:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 03:38:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 03:38:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:38:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 03:38:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:38:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 248 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 44 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 5992 KB; 2026-04-02 03:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 292 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 44 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6063 KB; 2026-04-02 03:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 296 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 70 KB; rules::ProcessConditionsCache: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6080 KB; 2026-04-02 03:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 296 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 59 KB; rules::ProcessConditionsCache: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6072 KB; 2026-04-02 03:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 296 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::ProcessConditionsCache: 48 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6071 KB; 2026-04-02 03:43:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 03:36:56, To:, 2026-04-02 03:43:06, Duration (s):, 370, Events Per Second:, 0.457, Events:, 169, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 168, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22664 2026-04-02 03:43:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s699ms. 2026-04-02 03:43:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 03:43:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 03:43:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 03:43:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 03:43:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:43:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 03:43:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:43:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 235 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::ProcessConditionsCache: 47 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 5986 KB; 2026-04-02 03:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 268 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 93 KB; rules::ProcessConditionsCache: 56 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6062 KB; 2026-04-02 03:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 273 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 93 KB; rules::ProcessConditionsCache: 51 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6066 KB; 2026-04-02 03:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 273 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 93 KB; rules::ProcessConditionsCache: 51 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6070 KB; 2026-04-02 03:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ProcessInfo: 273 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 61 KB; rules::ProcessConditionsCache: 51 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6044 KB; 2026-04-02 03:48:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 03:48:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 03:48:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 03:48:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 03:48:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:48:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 03:48:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:48:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 273 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 57 KB; rules::ProcessConditionsCache: 51 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6029 KB; 2026-04-02 03:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 273 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 57 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6031 KB; 2026-04-02 03:50:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 03:43:56, To:, 2026-04-02 03:50:06, Duration (s):, 370, Events Per Second:, 0.267, Events:, 99, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 98, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13282 2026-04-02 03:50:06 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s625ms. 2026-04-02 03:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 236 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 58 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 5993 KB; 2026-04-02 03:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 236 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 60 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 5997 KB; 2026-04-02 03:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 236 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 58 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 5996 KB; 2026-04-02 03:53:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 03:53:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 03:53:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 03:53:44 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 03:53:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:53:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 03:53:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:53:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 237 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 65 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6012 KB; 2026-04-02 03:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 237 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 65 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6014 KB; 2026-04-02 03:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 242 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 65 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6019 KB; 2026-04-02 03:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 254 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 70 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6038 KB; 2026-04-02 03:57:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 03:50:04, To:, 2026-04-02 03:57:06, Duration (s):, 422, Events Per Second:, 0.135, Events:, 57, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 56, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9328 2026-04-02 03:57:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s097ms. 2026-04-02 03:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 246 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 70 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6029 KB; 2026-04-02 03:58:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 03:58:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 03:58:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 03:58:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 03:58:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:58:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 03:58:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:58:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 03:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 246 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 69 KB; rules::ProcessConditionsCache: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6018 KB; 2026-04-02 04:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 251 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 73 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6020 KB; 2026-04-02 04:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 261 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 82 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6052 KB; 2026-04-02 04:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 267 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 80 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6064 KB; 2026-04-02 04:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 637 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; TcpIpConnectionsManager: 202 KB; BaseEvent: 165 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 44 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6668 KB; 2026-04-02 04:03:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 04:03:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 04:03:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 04:03:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 04:03:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:03:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 04:03:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:03:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 957 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 429 KB; TcpIpConnectionsManager: 354 KB; BaseEvent: 344 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; BatchSerializer::EventsQueueTag: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7833 KB; 2026-04-02 04:04:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 03:59:54, To:, 2026-04-02 04:04:06, Duration (s):, 252, Events Per Second:, 8.029, Events:, 2025, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1676, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 348, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 225907 2026-04-02 04:04:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s359ms. 2026-04-02 04:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1182 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; TcpIpConnectionsManager: 456 KB; rules::ProcessConditionsCache: 299 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; BaseEvent: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 44 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7726 KB; 2026-04-02 04:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1183 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; TcpIpConnectionsManager: 326 KB; rules::ProcessConditionsCache: 302 KB; ModuleInfoCache: 116 KB; BaseEvent: 103 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 44 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7604 KB; 2026-04-02 04:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1183 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::ProcessConditionsCache: 302 KB; TcpIpConnectionsManager: 170 KB; ModuleInfoCache: 116 KB; BaseEvent: 104 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 44 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7471 KB; 2026-04-02 04:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1183 KB; ModuleMetadata: 637 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::ProcessConditionsCache: 302 KB; ModuleInfoCache: 116 KB; BaseEvent: 105 KB; CacheEntry: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7362 KB; 2026-04-02 04:08:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 04:08:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 04:08:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 04:08:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 04:08:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:08:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 04:08:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:08:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1185 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 302 KB; ModuleInfoCache: 119 KB; BaseEvent: 106 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 45 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7381 KB; 2026-04-02 04:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1233 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 317 KB; ModuleInfoCache: 119 KB; BaseEvent: 115 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 45 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7461 KB; 2026-04-02 04:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1235 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 319 KB; ModuleInfoCache: 119 KB; BaseEvent: 116 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 45 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7468 KB; 2026-04-02 04:11:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 04:04:03, To:, 2026-04-02 04:11:06, Duration (s):, 423, Events Per Second:, 1.718, Events:, 727, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 625, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 101, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 84559 2026-04-02 04:11:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s840ms. 2026-04-02 04:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 280 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6368 KB; 2026-04-02 04:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 280 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6372 KB; 2026-04-02 04:13:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 04:13:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 04:13:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 04:13:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 04:13:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:13:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 04:13:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:13:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 321 KB; ProcessInfo: 280 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6373 KB; 2026-04-02 04:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::ProcessConditionsCache: 321 KB; ProcessInfo: 280 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6379 KB; 2026-04-02 04:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 323 KB; ProcessInfo: 283 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6388 KB; 2026-04-02 04:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::ProcessConditionsCache: 326 KB; ProcessInfo: 283 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 72 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6413 KB; 2026-04-02 04:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; rules::ProcessConditionsCache: 328 KB; ProcessInfo: 286 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6420 KB; 2026-04-02 04:18:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 04:14:55, To:, 2026-04-02 04:18:06, Duration (s):, 191, Events Per Second:, 0.078, Events:, 15, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 14, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 2597 2026-04-02 04:18:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s906ms. 2026-04-02 04:18:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 04:18:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 04:18:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 04:18:45 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 04:18:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:18:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 04:18:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:18:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::ProcessConditionsCache: 329 KB; ProcessInfo: 233 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6345 KB; 2026-04-02 04:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::ProcessConditionsCache: 329 KB; ProcessInfo: 233 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 77 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6350 KB; 2026-04-02 04:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::ProcessConditionsCache: 333 KB; ProcessInfo: 240 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6359 KB; 2026-04-02 04:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::ProcessConditionsCache: 333 KB; ProcessInfo: 240 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 72 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6362 KB; 2026-04-02 04:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::ProcessConditionsCache: 333 KB; ProcessInfo: 240 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6364 KB; 2026-04-02 04:23:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 04:23:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 04:23:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 04:23:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 04:23:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:23:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 04:23:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:23:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 336 KB; ProcessInfo: 242 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6343 KB; 2026-04-02 04:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 336 KB; ProcessInfo: 242 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6347 KB; 2026-04-02 04:25:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 04:19:59, To:, 2026-04-02 04:25:06, Duration (s):, 307, Events Per Second:, 0.101, Events:, 31, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 30, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 5755 2026-04-02 04:25:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s760ms. 2026-04-02 04:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 339 KB; ProcessInfo: 237 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6348 KB; 2026-04-02 04:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 339 KB; ProcessInfo: 237 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 72 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6347 KB; 2026-04-02 04:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 339 KB; ProcessInfo: 249 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6351 KB; 2026-04-02 04:28:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 04:28:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 04:28:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 04:28:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 04:28:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:28:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 04:28:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:28:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; rules::ProcessConditionsCache: 361 KB; ProcessInfo: 273 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6410 KB; 2026-04-02 04:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; rules::ProcessConditionsCache: 361 KB; ProcessInfo: 273 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6411 KB; 2026-04-02 04:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 394 KB; ProcessInfo: 302 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 45 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6496 KB; 2026-04-02 04:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; rules::ProcessConditionsCache: 394 KB; ProcessInfo: 302 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 45 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6489 KB; 2026-04-02 04:32:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 04:25:00, To:, 2026-04-02 04:32:06, Duration (s):, 426, Events Per Second:, 0.418, Events:, 178, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 156, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 21, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22442 2026-04-02 04:32:06 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s689ms. 2026-04-02 04:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 394 KB; ProcessInfo: 259 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6418 KB; 2026-04-02 04:33:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 04:33:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 04:33:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 04:33:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 04:33:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:33:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 04:33:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:33:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 394 KB; ProcessInfo: 261 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6388 KB; 2026-04-02 04:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 394 KB; ProcessInfo: 268 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 67 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6396 KB; 2026-04-02 04:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; rules::ProcessConditionsCache: 396 KB; ProcessInfo: 273 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6407 KB; 2026-04-02 04:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 295 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 45 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6111 KB; 2026-04-02 04:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 657 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 295 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 82 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6085 KB; 2026-04-02 04:38:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 04:38:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 04:38:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 04:38:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 04:38:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:38:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 04:38:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:38:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 295 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 82 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6076 KB; 2026-04-02 04:39:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 04:32:34, To:, 2026-04-02 04:39:06, Duration (s):, 392, Events Per Second:, 0.546, Events:, 214, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 213, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27398 2026-04-02 04:39:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s602ms. 2026-04-02 04:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 302 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 45 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6100 KB; 2026-04-02 04:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 302 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 45 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6079 KB; 2026-04-02 04:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 327 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 69 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6149 KB; 2026-04-02 04:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 327 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 69 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6153 KB; 2026-04-02 04:43:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 04:43:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 04:43:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 04:43:46 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 04:43:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:43:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 04:43:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:43:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 333 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 74 KB; rules::ProcessConditionsCache: 73 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6171 KB; 2026-04-02 04:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 333 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 73 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6165 KB; 2026-04-02 04:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 336 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6174 KB; 2026-04-02 04:46:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 04:39:54, To:, 2026-04-02 04:46:06, Duration (s):, 372, Events Per Second:, 0.271, Events:, 101, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 88, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13857 2026-04-02 04:46:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s665ms. 2026-04-02 04:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 287 KB; rules::ProcessConditionsCache: 128 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6196 KB; 2026-04-02 04:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; ProcessInfo: 602 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; TcpIpConnectionsManager: 207 KB; BaseEvent: 175 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 45 KB; BatchSerializer::EventsQueueTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6761 KB; 2026-04-02 04:48:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 04:48:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 04:48:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 04:48:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 04:48:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:48:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 04:48:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:48:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 919 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; rules::ProcessConditionsCache: 407 KB; TcpIpConnectionsManager: 338 KB; BaseEvent: 329 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; BatchSerializer::EventsQueueTag: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7752 KB; 2026-04-02 04:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1254 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 496 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; TcpIpConnectionsManager: 459 KB; rules::ProcessConditionsCache: 363 KB; BatchSerializer::EventsQueueTag: 128 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 8380 KB; 2026-04-02 04:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1258 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 499 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 374 KB; TcpIpConnectionsManager: 328 KB; BatchSerializer::EventsQueueTag: 130 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 8270 KB; 2026-04-02 04:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1258 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 501 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 374 KB; TcpIpConnectionsManager: 197 KB; BatchSerializer::EventsQueueTag: 131 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 8147 KB; 2026-04-02 04:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1258 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 501 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 372 KB; BatchSerializer::EventsQueueTag: 131 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 8003 KB; 2026-04-02 04:53:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 04:46:44, To:, 2026-04-02 04:53:06, Duration (s):, 382, Events Per Second:, 7.252, Events:, 2772, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2281, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 490, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 306677 2026-04-02 04:53:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s211ms. 2026-04-02 04:53:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 04:53:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 04:53:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 04:53:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 04:53:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:53:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 04:53:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:53:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 375 KB; ProcessInfo: 237 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6353 KB; 2026-04-02 04:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 373 KB; ProcessInfo: 237 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6352 KB; 2026-04-02 04:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 376 KB; ProcessInfo: 239 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6357 KB; 2026-04-02 04:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; rules::ProcessConditionsCache: 376 KB; ProcessInfo: 239 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6359 KB; 2026-04-02 04:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 376 KB; ProcessInfo: 239 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6362 KB; 2026-04-02 04:58:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 04:58:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 04:58:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 04:58:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 04:58:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:58:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 04:58:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:58:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 04:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; rules::ProcessConditionsCache: 404 KB; ProcessInfo: 239 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6378 KB; 2026-04-02 05:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; rules::ProcessConditionsCache: 406 KB; ProcessInfo: 239 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6382 KB; 2026-04-02 05:00:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 04:52:59, To:, 2026-04-02 05:00:06, Duration (s):, 427, Events Per Second:, 0.286, Events:, 122, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 37, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 42, Livegrid:, 42, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13257 2026-04-02 05:00:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s630ms. 2026-04-02 05:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; rules::ProcessConditionsCache: 419 KB; ProcessInfo: 242 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6404 KB; 2026-04-02 05:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; rules::ProcessConditionsCache: 419 KB; ProcessInfo: 242 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 72 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6409 KB; 2026-04-02 05:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; rules::ProcessConditionsCache: 419 KB; ProcessInfo: 242 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6409 KB; 2026-04-02 05:03:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 05:03:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 05:03:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 05:03:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 05:03:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:03:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 05:03:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:03:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; rules::ProcessConditionsCache: 419 KB; ProcessInfo: 242 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6412 KB; 2026-04-02 05:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 419 KB; ProcessInfo: 242 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6433 KB; 2026-04-02 05:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 423 KB; ProcessInfo: 246 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 77 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6446 KB; 2026-04-02 05:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 423 KB; ProcessInfo: 246 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 77 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6448 KB; 2026-04-02 05:07:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 05:02:01, To:, 2026-04-02 05:07:06, Duration (s):, 305, Events Per Second:, 0.036, Events:, 11, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 8, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 2194 2026-04-02 05:07:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s734ms. 2026-04-02 05:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 424 KB; ProcessInfo: 235 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 78 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6435 KB; 2026-04-02 05:08:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 05:08:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 05:08:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 05:08:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 05:08:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:08:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 05:08:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:08:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::ProcessConditionsCache: 424 KB; ProcessInfo: 235 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 79 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6464 KB; 2026-04-02 05:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 279 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; BaseEvent: 60 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::ProcessConditionsCache: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6196 KB; 2026-04-02 05:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 283 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 82 KB; BaseEvent: 62 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6219 KB; 2026-04-02 05:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 284 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 78 KB; BaseEvent: 63 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6221 KB; 2026-04-02 05:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 284 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 79 KB; BaseEvent: 62 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6222 KB; 2026-04-02 05:13:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 05:13:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 05:13:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 05:13:47 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 05:13:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:13:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 05:13:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:13:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 284 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; BaseEvent: 63 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6228 KB; 2026-04-02 05:14:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 05:07:56, To:, 2026-04-02 05:14:06, Duration (s):, 370, Events Per Second:, 0.843, Events:, 312, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 131, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 90, Livegrid:, 90, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32112 2026-04-02 05:14:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s694ms. 2026-04-02 05:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 232 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 81 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 45 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6087 KB; 2026-04-02 05:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 235 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 79 KB; TcpIpConnectionsManager: 57 KB; rules::ProcessConditionsCache: 46 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6095 KB; 2026-04-02 05:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 235 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 82 KB; TcpIpConnectionsManager: 57 KB; rules::ProcessConditionsCache: 48 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6100 KB; 2026-04-02 05:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 237 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 83 KB; TcpIpConnectionsManager: 57 KB; rules::ProcessConditionsCache: 50 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6111 KB; 2026-04-02 05:18:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 05:18:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 05:18:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 05:18:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 05:18:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:18:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 05:18:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:18:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 237 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 85 KB; TcpIpConnectionsManager: 57 KB; rules::ProcessConditionsCache: 50 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6098 KB; 2026-04-02 05:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 243 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 86 KB; TcpIpConnectionsManager: 57 KB; rules::ProcessConditionsCache: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6115 KB; 2026-04-02 05:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 243 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 88 KB; TcpIpConnectionsManager: 57 KB; rules::ProcessConditionsCache: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6121 KB; 2026-04-02 05:21:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 05:14:55, To:, 2026-04-02 05:21:06, Duration (s):, 371, Events Per Second:, 0.081, Events:, 30, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 27, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 4900 2026-04-02 05:21:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s394ms. 2026-04-02 05:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 236 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 90 KB; rules::ProcessConditionsCache: 58 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6116 KB; 2026-04-02 05:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 248 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 77 KB; TcpIpConnectionsManager: 70 KB; rules::ProcessConditionsCache: 65 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6097 KB; 2026-04-02 05:23:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 05:23:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 05:23:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 05:23:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 05:23:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:23:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 05:23:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:23:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 148 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 86 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 3 KB; BatchStringTag: 0 KB; Total: 6263 KB; 2026-04-02 05:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 289 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6154 KB; 2026-04-02 05:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 298 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 62 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6169 KB; 2026-04-02 05:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 324 KB; TcpIpConnectionsManager: 131 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 44 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6264 KB; 2026-04-02 05:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 337 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 106 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 44 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6260 KB; 2026-04-02 05:28:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 05:20:40, To:, 2026-04-02 05:28:06, Duration (s):, 446, Events Per Second:, 0.751, Events:, 335, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 272, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 31, Livegrid:, 31, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39028 2026-04-02 05:28:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s546ms. 2026-04-02 05:28:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 05:28:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 05:28:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 05:28:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 05:28:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:28:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 05:28:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:28:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 476 KB; ProcessInfo: 318 KB; TcpIpConnectionsManager: 144 KB; ModuleInfoCache: 119 KB; rules::ProcessConditionsCache: 118 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6250 KB; 2026-04-02 05:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 476 KB; ProcessInfo: 318 KB; TcpIpConnectionsManager: 136 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 72 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6189 KB; 2026-04-02 05:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 478 KB; ProcessInfo: 324 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 77 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6182 KB; 2026-04-02 05:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 481 KB; ProcessInfo: 348 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 103 KB; rules::ProcessConditionsCache: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6213 KB; 2026-04-02 05:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 348 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 84 KB; rules::ProcessConditionsCache: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6197 KB; 2026-04-02 05:33:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:33:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 05:33:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:33:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:33:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 05:33:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 05:33:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 05:33:48 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 05:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 348 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 82 KB; rules::ProcessConditionsCache: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6194 KB; 2026-04-02 05:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 348 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 74 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6172 KB; 2026-04-02 05:35:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 05:28:01, To:, 2026-04-02 05:35:06, Duration (s):, 425, Events Per Second:, 0.475, Events:, 202, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 201, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25603 2026-04-02 05:35:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s766ms. 2026-04-02 05:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 233 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6029 KB; 2026-04-02 05:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 282 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; Total: 6271 KB; 2026-04-02 05:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 282 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6140 KB; 2026-04-02 05:38:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:38:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 05:38:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:38:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:38:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 05:38:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 05:38:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 05:38:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 05:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 476 KB; ProcessInfo: 282 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6130 KB; 2026-04-02 05:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 478 KB; ProcessInfo: 326 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 98 KB; rules::ProcessConditionsCache: 82 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6195 KB; 2026-04-02 05:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 480 KB; ProcessInfo: 331 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 89 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6174 KB; 2026-04-02 05:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 333 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 91 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6188 KB; 2026-04-02 05:42:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 05:36:10, To:, 2026-04-02 05:42:06, Duration (s):, 356, Events Per Second:, 0.761, Events:, 271, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 265, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33922 2026-04-02 05:42:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s081ms. 2026-04-02 05:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 237 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 94 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6055 KB; 2026-04-02 05:43:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:43:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 05:43:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:43:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:43:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 05:43:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 05:43:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 05:43:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 05:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 237 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 94 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6060 KB; 2026-04-02 05:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 237 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 94 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6059 KB; 2026-04-02 05:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 240 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 94 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6066 KB; 2026-04-02 05:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 240 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 94 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6128 KB; 2026-04-02 05:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 240 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6129 KB; 2026-04-02 05:48:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:48:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 05:48:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:48:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:48:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 05:48:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 05:48:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 05:48:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 05:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 240 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6116 KB; 2026-04-02 05:49:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 05:44:55, To:, 2026-04-02 05:49:06, Duration (s):, 251, Events Per Second:, 0.036, Events:, 9, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 8, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 2053 2026-04-02 05:49:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s610ms. 2026-04-02 05:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 230 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6109 KB; 2026-04-02 05:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 235 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6126 KB; 2026-04-02 05:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 259 KB; rules::ProcessConditionsCache: 128 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6220 KB; 2026-04-02 05:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 259 KB; rules::ProcessConditionsCache: 128 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6222 KB; 2026-04-02 05:53:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:53:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 05:53:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:53:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:53:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 05:53:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 05:53:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 05:53:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 05:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 271 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 77 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6173 KB; 2026-04-02 05:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 271 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 45 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6167 KB; 2026-04-02 05:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 274 KB; rules::ProcessConditionsCache: 132 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 45 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6176 KB; 2026-04-02 05:56:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 05:50:18, To:, 2026-04-02 05:56:06, Duration (s):, 348, Events Per Second:, 0.462, Events:, 161, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 104, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 22, Livegrid:, 22, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19914 2026-04-02 05:56:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s012ms. 2026-04-02 05:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 243 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6099 KB; 2026-04-02 05:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 243 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6102 KB; 2026-04-02 05:58:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:58:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 05:58:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:58:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 05:58:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 05:58:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 05:58:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 05:58:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 05:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 477 KB; ProcessInfo: 243 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6092 KB; 2026-04-02 06:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 660 KB; ProcessInfo: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 480 KB; TcpIpConnectionsManager: 197 KB; BaseEvent: 157 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 45 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6728 KB; 2026-04-02 06:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 981 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; TcpIpConnectionsManager: 343 KB; BaseEvent: 342 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; BatchSerializer::EventsQueueTag: 91 KB; rules::ProcessConditionsCache: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7524 KB; 2026-04-02 06:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1122 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; TcpIpConnectionsManager: 418 KB; BaseEvent: 404 KB; rules::ProcessConditionsCache: 237 KB; ModuleInfoCache: 119 KB; BatchSerializer::EventsQueueTag: 108 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7966 KB; 2026-04-02 06:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 1122 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; BaseEvent: 407 KB; TcpIpConnectionsManager: 284 KB; rules::ProcessConditionsCache: 221 KB; ModuleInfoCache: 119 KB; BatchSerializer::EventsQueueTag: 109 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7819 KB; 2026-04-02 06:03:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 05:58:59, To:, 2026-04-02 06:03:06, Duration (s):, 247, Events Per Second:, 9.584, Events:, 2370, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1989, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 378, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 263158 2026-04-02 06:03:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s570ms. 2026-04-02 06:03:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:03:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 06:03:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:03:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:03:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 06:03:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 06:03:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 06:03:49 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 06:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 757 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; rules::ProcessConditionsCache: 222 KB; TcpIpConnectionsManager: 133 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6787 KB; 2026-04-02 06:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 757 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 222 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6720 KB; 2026-04-02 06:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 760 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 224 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6726 KB; 2026-04-02 06:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 760 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 224 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6729 KB; 2026-04-02 06:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 760 KB; ModuleMetadata: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 224 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6733 KB; 2026-04-02 06:08:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:08:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 06:08:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:08:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:08:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 06:08:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 06:08:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 06:08:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 06:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 784 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 478 KB; rules::ProcessConditionsCache: 224 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 82 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6756 KB; 2026-04-02 06:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ProcessInfo: 828 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 481 KB; rules::ProcessConditionsCache: 233 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6837 KB; 2026-04-02 06:10:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 06:04:55, To:, 2026-04-02 06:10:06, Duration (s):, 311, Events Per Second:, 0.604, Events:, 188, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 187, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24263 2026-04-02 06:10:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s691ms. 2026-04-02 06:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6296 KB; 2026-04-02 06:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6281 KB; 2026-04-02 06:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6284 KB; 2026-04-02 06:13:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:13:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 06:13:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:13:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:13:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 06:13:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 06:13:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 06:13:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 06:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6334 KB; 2026-04-02 06:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6334 KB; 2026-04-02 06:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6341 KB; 2026-04-02 06:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6333 KB; 2026-04-02 06:17:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 06:10:06, To:, 2026-04-02 06:17:06, Duration (s):, 420, Events Per Second:, 0.238, Events:, 100, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 99, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13658 2026-04-02 06:17:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s769ms. 2026-04-02 06:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; rules::ProcessConditionsCache: 244 KB; ProcessInfo: 240 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6223 KB; 2026-04-02 06:18:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:18:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 06:18:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:18:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:18:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 06:18:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 06:18:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 06:18:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 06:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 479 KB; rules::ProcessConditionsCache: 244 KB; ProcessInfo: 240 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6210 KB; 2026-04-02 06:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 481 KB; rules::ProcessConditionsCache: 244 KB; ProcessInfo: 240 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6213 KB; 2026-04-02 06:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; rules::ProcessConditionsCache: 251 KB; ProcessInfo: 246 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6228 KB; 2026-04-02 06:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; rules::ProcessConditionsCache: 253 KB; ProcessInfo: 248 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6240 KB; 2026-04-02 06:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 251 KB; ProcessInfo: 248 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6256 KB; 2026-04-02 06:23:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:23:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 06:23:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:23:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:23:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 06:23:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 06:23:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 06:23:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 06:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 253 KB; ProcessInfo: 248 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6261 KB; 2026-04-02 06:24:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 06:20:04, To:, 2026-04-02 06:24:06, Duration (s):, 242, Events Per Second:, 0.087, Events:, 21, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 20, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 4130 2026-04-02 06:24:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s619ms. 2026-04-02 06:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 249 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6282 KB; 2026-04-02 06:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 255 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; Total: 6286 KB; 2026-04-02 06:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 256 KB; ProcessInfo: 255 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6283 KB; 2026-04-02 06:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 258 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6286 KB; 2026-04-02 06:28:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:28:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 06:28:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:28:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:28:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 06:28:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 06:28:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 06:28:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 06:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 479 KB; ProcessInfo: 270 KB; rules::ProcessConditionsCache: 261 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6278 KB; 2026-04-02 06:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 480 KB; ProcessInfo: 270 KB; rules::ProcessConditionsCache: 258 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6273 KB; 2026-04-02 06:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 380 KB; rules::ProcessConditionsCache: 331 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6514 KB; 2026-04-02 06:31:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 06:24:00, To:, 2026-04-02 06:31:06, Duration (s):, 426, Events Per Second:, 0.976, Events:, 416, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 363, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49330 2026-04-02 06:31:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s157ms. 2026-04-02 06:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 353 KB; rules::ProcessConditionsCache: 332 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6421 KB; 2026-04-02 06:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 400 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 18 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6222 KB; 2026-04-02 06:33:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:33:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 06:33:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:33:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:33:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 06:33:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 06:33:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 06:33:50 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 06:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 400 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 111 KB; CacheEntry: 103 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6247 KB; 2026-04-02 06:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 686 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 400 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 44 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6429 KB; 2026-04-02 06:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 411 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 113 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::ProcessConditionsCache: 49 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6450 KB; 2026-04-02 06:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 411 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6333 KB; 2026-04-02 06:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 458 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 108 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6526 KB; 2026-04-02 06:38:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 06:31:19, To:, 2026-04-02 06:38:06, Duration (s):, 407, Events Per Second:, 0.577, Events:, 235, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 234, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31198 2026-04-02 06:38:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s717ms. 2026-04-02 06:38:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:38:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 06:38:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:38:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:38:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 06:38:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 06:38:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 06:38:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 06:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 481 KB; ProcessInfo: 284 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 115 KB; CacheEntry: 103 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 6097 KB; 2026-04-02 06:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 330 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6175 KB; 2026-04-02 06:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 340 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6211 KB; 2026-04-02 06:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 343 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 69 KB; rules::ProcessConditionsCache: 49 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6158 KB; 2026-04-02 06:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 351 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 75 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6196 KB; 2026-04-02 06:43:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:43:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 06:43:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:43:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:43:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 06:43:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 06:43:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 06:43:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 06:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 436 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 102 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 44 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6401 KB; 2026-04-02 06:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 436 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; rules::ProcessConditionsCache: 102 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 44 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6441 KB; 2026-04-02 06:45:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 06:37:44, To:, 2026-04-02 06:45:06, Duration (s):, 442, Events Per Second:, 1.008, Events:, 446, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 443, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57914 2026-04-02 06:45:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s868ms. 2026-04-02 06:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 329 KB; ModuleInfoCache: 119 KB; rules::ProcessConditionsCache: 104 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6250 KB; 2026-04-02 06:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 334 KB; ModuleInfoCache: 119 KB; rules::ProcessConditionsCache: 109 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6245 KB; 2026-04-02 06:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 339 KB; ModuleInfoCache: 119 KB; rules::ProcessConditionsCache: 118 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6311 KB; 2026-04-02 06:48:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:48:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 06:48:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:48:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:48:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 06:48:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 06:48:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 06:48:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 06:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 339 KB; ModuleInfoCache: 119 KB; rules::ProcessConditionsCache: 118 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6306 KB; 2026-04-02 06:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 343 KB; ModuleInfoCache: 119 KB; rules::ProcessConditionsCache: 118 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6291 KB; 2026-04-02 06:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 349 KB; ModuleInfoCache: 119 KB; rules::ProcessConditionsCache: 118 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6301 KB; 2026-04-02 06:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 356 KB; ModuleInfoCache: 119 KB; rules::ProcessConditionsCache: 109 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 6275 KB; 2026-04-02 06:52:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 06:44:55, To:, 2026-04-02 06:52:06, Duration (s):, 431, Events Per Second:, 0.269, Events:, 116, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 113, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17734 2026-04-02 06:52:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s535ms. 2026-04-02 06:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 664 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 282 KB; ModuleInfoCache: 119 KB; rules::ProcessConditionsCache: 114 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6188 KB; 2026-04-02 06:53:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:53:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 06:53:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:53:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:53:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 06:53:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 06:53:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 06:53:51 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 06:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 287 KB; ModuleInfoCache: 119 KB; rules::ProcessConditionsCache: 107 KB; TcpIpConnectionsManager: 105 KB; CacheEntry: 103 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6178 KB; 2026-04-02 06:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 287 KB; ModuleInfoCache: 119 KB; rules::ProcessConditionsCache: 105 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6168 KB; 2026-04-02 06:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 295 KB; ModuleInfoCache: 119 KB; rules::ProcessConditionsCache: 114 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6176 KB; 2026-04-02 06:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 309 KB; rules::ProcessConditionsCache: 138 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6230 KB; 2026-04-02 06:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 309 KB; rules::ProcessConditionsCache: 138 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6230 KB; 2026-04-02 06:58:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:58:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 06:58:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:58:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 06:58:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 06:58:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 06:58:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 06:58:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 06:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 309 KB; rules::ProcessConditionsCache: 138 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6229 KB; 2026-04-02 06:59:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 06:51:58, To:, 2026-04-02 06:59:06, Duration (s):, 428, Events Per Second:, 0.353, Events:, 151, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 110, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 20, Livegrid:, 20, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21901 2026-04-02 06:59:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s382ms. 2026-04-02 07:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 246 KB; rules::ProcessConditionsCache: 138 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6129 KB; 2026-04-02 07:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3612 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 246 KB; rules::ProcessConditionsCache: 138 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6129 KB; 2026-04-02 07:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 144 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6224 KB; 2026-04-02 07:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6270 KB; 2026-04-02 07:03:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:03:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 07:03:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:03:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:03:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 07:03:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 07:03:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 07:03:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 07:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 158 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 115 KB; CacheEntry: 103 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6334 KB; 2026-04-02 07:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 147 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6302 KB; 2026-04-02 07:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6331 KB; 2026-04-02 07:06:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 06:56:26, To:, 2026-04-02 07:06:06, Duration (s):, 580, Events Per Second:, 0.391, Events:, 227, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 226, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30484 2026-04-02 07:06:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s651ms. 2026-04-02 07:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ProcessInfo: 262 KB; rules::ProcessConditionsCache: 159 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6221 KB; 2026-04-02 07:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 271 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6253 KB; 2026-04-02 07:08:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:08:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 07:08:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:08:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:08:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 07:08:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 07:08:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 07:08:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 07:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 274 KB; rules::ProcessConditionsCache: 166 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6258 KB; 2026-04-02 07:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 170 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6345 KB; 2026-04-02 07:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 172 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6365 KB; 2026-04-02 07:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 480 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 164 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6303 KB; 2026-04-02 07:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 45 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6336 KB; 2026-04-02 07:13:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 07:06:09, To:, 2026-04-02 07:13:06, Duration (s):, 417, Events Per Second:, 0.589, Events:, 246, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 245, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32223 2026-04-02 07:13:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s630ms. 2026-04-02 07:13:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:13:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 07:13:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:13:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:13:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 07:13:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 07:13:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 07:13:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 07:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 166 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6185 KB; 2026-04-02 07:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 181 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6210 KB; 2026-04-02 07:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6208 KB; 2026-04-02 07:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 195 KB; TcpIpConnectionsManager: 125 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6340 KB; 2026-04-02 07:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 199 KB; TcpIpConnectionsManager: 129 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6372 KB; 2026-04-02 07:18:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:18:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 07:18:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:18:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:18:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 07:18:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 07:18:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 07:18:52 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 07:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 336 KB; rules::ProcessConditionsCache: 170 KB; TcpIpConnectionsManager: 126 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6345 KB; 2026-04-02 07:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 339 KB; rules::ProcessConditionsCache: 170 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 45 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6324 KB; 2026-04-02 07:20:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 07:13:03, To:, 2026-04-02 07:20:06, Duration (s):, 423, Events Per Second:, 0.541, Events:, 229, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 228, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28242 2026-04-02 07:20:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s773ms. 2026-04-02 07:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 274 KB; rules::ProcessConditionsCache: 180 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6233 KB; 2026-04-02 07:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 479 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 185 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6225 KB; 2026-04-02 07:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 479 KB; ProcessInfo: 282 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6211 KB; 2026-04-02 07:23:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:23:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 07:23:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:23:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:23:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 07:23:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 07:23:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 07:23:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 07:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 480 KB; ProcessInfo: 309 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 98 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6264 KB; 2026-04-02 07:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 345 KB; rules::ProcessConditionsCache: 237 KB; TcpIpConnectionsManager: 134 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6422 KB; 2026-04-02 07:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 348 KB; rules::ProcessConditionsCache: 182 KB; TcpIpConnectionsManager: 128 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6361 KB; 2026-04-02 07:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 351 KB; rules::ProcessConditionsCache: 184 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 45 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6354 KB; 2026-04-02 07:27:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 07:20:04, To:, 2026-04-02 07:27:06, Duration (s):, 422, Events Per Second:, 0.580, Events:, 245, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 244, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30727 2026-04-02 07:27:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s722ms. 2026-04-02 07:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 282 KB; rules::ProcessConditionsCache: 190 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6249 KB; 2026-04-02 07:28:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:28:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 07:28:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:28:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:28:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 07:28:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 07:28:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 07:28:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 07:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 190 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 6281 KB; 2026-04-02 07:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 113 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6325 KB; 2026-04-02 07:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 119 KB; TcpIpConnectionsManager: 113 KB; CacheEntry: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6345 KB; 2026-04-02 07:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 481 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6356 KB; 2026-04-02 07:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 208 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 45 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6358 KB; 2026-04-02 07:33:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:33:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 07:33:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:33:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:33:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 07:33:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 07:33:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 07:33:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 07:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 355 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 45 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6375 KB; 2026-04-02 07:34:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 07:27:04, To:, 2026-04-02 07:34:06, Duration (s):, 422, Events Per Second:, 0.492, Events:, 208, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 205, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27121 2026-04-02 07:34:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s390ms. 2026-04-02 07:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 667 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 262 KB; rules::ProcessConditionsCache: 204 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6240 KB; 2026-04-02 07:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 670 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 287 KB; rules::ProcessConditionsCache: 226 KB; ModuleInfoCache: 119 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6338 KB; 2026-04-02 07:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 671 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 120 KB; CacheEntry: 105 KB; TcpIpConnectionsManager: 95 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6276 KB; 2026-04-02 07:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 671 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 120 KB; CacheEntry: 105 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6271 KB; 2026-04-02 07:38:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:38:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 07:38:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:38:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:38:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 07:38:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 07:38:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 07:38:53 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 07:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6260 KB; 2026-04-02 07:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6249 KB; 2026-04-02 07:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6249 KB; 2026-04-02 07:41:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 07:34:01, To:, 2026-04-02 07:41:06, Duration (s):, 425, Events Per Second:, 0.259, Events:, 110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 90, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 9, Livegrid:, 10, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15218 2026-04-02 07:41:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s643ms. 2026-04-02 07:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6375 KB; 2026-04-02 07:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6373 KB; 2026-04-02 07:43:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:43:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 07:43:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:43:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:43:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 07:43:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 07:43:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 07:43:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 07:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6375 KB; 2026-04-02 07:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6361 KB; 2026-04-02 07:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6361 KB; 2026-04-02 07:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 371 KB; rules::ProcessConditionsCache: 211 KB; ModuleInfoCache: 121 KB; TcpIpConnectionsManager: 111 KB; CacheEntry: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 46 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6462 KB; 2026-04-02 07:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 378 KB; rules::ProcessConditionsCache: 226 KB; ModuleInfoCache: 121 KB; TcpIpConnectionsManager: 120 KB; CacheEntry: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 46 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6504 KB; 2026-04-02 07:48:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 07:36:19, To:, 2026-04-02 07:48:06, Duration (s):, 707, Events Per Second:, 0.541, Events:, 383, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 382, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49389 2026-04-02 07:48:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s780ms. 2026-04-02 07:48:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:48:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 07:48:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:48:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:48:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 07:48:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 07:48:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 07:48:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 07:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 217 KB; TcpIpConnectionsManager: 133 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6378 KB; 2026-04-02 07:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 355 KB; rules::ProcessConditionsCache: 262 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6467 KB; 2026-04-02 07:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 675 KB; ProcessInfo: 584 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; TcpIpConnectionsManager: 193 KB; BaseEvent: 131 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; rules::ProcessConditionsCache: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6778 KB; 2026-04-02 07:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ProcessInfo: 853 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; rules::ProcessConditionsCache: 394 KB; TcpIpConnectionsManager: 294 KB; BaseEvent: 260 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; BatchSerializer::EventsQueueTag: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7572 KB; 2026-04-02 07:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ProcessInfo: 915 KB; ModuleMetadata: 675 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; TcpIpConnectionsManager: 312 KB; BaseEvent: 285 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; BatchSerializer::EventsQueueTag: 78 KB; rules::ProcessConditionsCache: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7366 KB; 2026-04-02 07:53:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:53:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 07:53:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:53:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:53:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 07:53:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 07:53:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 07:53:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 07:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ProcessInfo: 916 KB; ModuleMetadata: 679 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; BaseEvent: 288 KB; TcpIpConnectionsManager: 213 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; BatchSerializer::EventsQueueTag: 79 KB; rules::ProcessConditionsCache: 53 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7250 KB; 2026-04-02 07:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ProcessInfo: 916 KB; ModuleMetadata: 679 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; BaseEvent: 289 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; TcpIpConnectionsManager: 97 KB; BatchSerializer::EventsQueueTag: 79 KB; rules::ProcessConditionsCache: 53 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7138 KB; 2026-04-02 07:55:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 07:48:01, To:, 2026-04-02 07:55:06, Duration (s):, 425, Events Per Second:, 3.945, Events:, 1678, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1405, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 272, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 189003 2026-04-02 07:55:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s961ms. 2026-04-02 07:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 679 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 324 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; TcpIpConnectionsManager: 93 KB; rules::ProcessConditionsCache: 57 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6172 KB; 2026-04-02 07:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 679 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 480 KB; ProcessInfo: 348 KB; ModuleInfoCache: 121 KB; TcpIpConnectionsManager: 106 KB; CacheEntry: 106 KB; rules::ProcessConditionsCache: 55 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6204 KB; 2026-04-02 07:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 679 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 481 KB; ProcessInfo: 348 KB; ModuleInfoCache: 121 KB; TcpIpConnectionsManager: 106 KB; CacheEntry: 106 KB; rules::ProcessConditionsCache: 55 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6208 KB; 2026-04-02 07:58:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:58:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 07:58:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:58:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 07:58:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 07:58:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 07:58:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 07:58:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 07:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 679 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 348 KB; ModuleInfoCache: 121 KB; CacheEntry: 106 KB; TcpIpConnectionsManager: 82 KB; rules::ProcessConditionsCache: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6227 KB; 2026-04-02 08:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3616 KB; ModuleMetadata: 682 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 348 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; rules::ProcessConditionsCache: 83 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6222 KB; 2026-04-02 08:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 468 KB; rules::ProcessConditionsCache: 206 KB; BaseEvent: 124 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6668 KB; 2026-04-02 08:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; ProcessInfo: 624 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; rules::ProcessConditionsCache: 371 KB; BaseEvent: 197 KB; TcpIpConnectionsManager: 177 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BatchSerializer::EventsQueueTag: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 7154 KB; 2026-04-02 08:02:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 07:55:09, To:, 2026-04-02 08:02:06, Duration (s):, 417, Events Per Second:, 2.935, Events:, 1225, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 867, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 110, Livegrid:, 110, OriginUrl:, 0, Alarms:, 137, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 133593 2026-04-02 08:02:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s016ms. 2026-04-02 08:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; ProcessInfo: 643 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; TcpIpConnectionsManager: 257 KB; ModuleInfoCache: 122 KB; rules::ProcessConditionsCache: 120 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; Total: 6796 KB; 2026-04-02 08:03:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:03:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 08:03:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:03:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:03:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 08:03:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 08:03:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 08:03:54 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 08:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 738 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; TcpIpConnectionsManager: 253 KB; rules::ProcessConditionsCache: 206 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 75 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 7037 KB; 2026-04-02 08:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 743 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; rules::ProcessConditionsCache: 206 KB; TcpIpConnectionsManager: 187 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 78 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6956 KB; 2026-04-02 08:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 785 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; rules::ProcessConditionsCache: 277 KB; TcpIpConnectionsManager: 156 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7066 KB; 2026-04-02 08:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 807 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; rules::ProcessConditionsCache: 255 KB; TcpIpConnectionsManager: 129 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7031 KB; 2026-04-02 08:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 809 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; rules::ProcessConditionsCache: 209 KB; TcpIpConnectionsManager: 126 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 98 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6984 KB; 2026-04-02 08:08:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:08:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 08:08:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:08:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:08:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 08:08:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 08:08:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 08:08:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 08:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 884 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; rules::ProcessConditionsCache: 288 KB; TcpIpConnectionsManager: 141 KB; BaseEvent: 138 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7204 KB; 2026-04-02 08:09:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 08:02:01, To:, 2026-04-02 08:09:06, Duration (s):, 425, Events Per Second:, 2.085, Events:, 887, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 781, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 105, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 102211 2026-04-02 08:09:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s656ms. 2026-04-02 08:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 468 KB; rules::ProcessConditionsCache: 377 KB; TcpIpConnectionsManager: 143 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 47 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6896 KB; 2026-04-02 08:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 691 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; rules::ProcessConditionsCache: 380 KB; TcpIpConnectionsManager: 125 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 84 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7007 KB; 2026-04-02 08:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 691 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; rules::ProcessConditionsCache: 382 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 90 KB; BaseEvent: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 47 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6980 KB; 2026-04-02 08:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 714 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 478 KB; rules::ProcessConditionsCache: 386 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 86 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 47 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6990 KB; 2026-04-02 08:13:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:13:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 08:13:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:13:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:13:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 08:13:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 08:13:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 08:13:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 08:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 734 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 480 KB; rules::ProcessConditionsCache: 384 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 87 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 47 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7007 KB; 2026-04-02 08:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 736 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 480 KB; rules::ProcessConditionsCache: 384 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 86 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 47 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7012 KB; 2026-04-02 08:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 483 KB; rules::ProcessConditionsCache: 386 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 89 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 47 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7023 KB; 2026-04-02 08:16:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 08:09:01, To:, 2026-04-02 08:16:06, Duration (s):, 425, Events Per Second:, 1.107, Events:, 471, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 315, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 60, Livegrid:, 60, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52455 2026-04-02 08:16:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s996ms. 2026-04-02 08:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 724 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 387 KB; ProcessInfo: 236 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6641 KB; 2026-04-02 08:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 726 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 389 KB; ProcessInfo: 239 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6651 KB; 2026-04-02 08:18:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:18:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 08:18:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:18:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:18:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 08:18:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 08:18:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 08:18:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 08:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 261 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 21 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6203 KB; 2026-04-02 08:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 289 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 95 KB; rules::ProcessConditionsCache: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 6344 KB; 2026-04-02 08:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 290 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 107 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6389 KB; 2026-04-02 08:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 712 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 290 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 47 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6381 KB; 2026-04-02 08:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 713 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 290 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 47 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6380 KB; 2026-04-02 08:23:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 08:16:55, To:, 2026-04-02 08:23:06, Duration (s):, 371, Events Per Second:, 0.407, Events:, 151, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 148, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19630 2026-04-02 08:23:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s973ms. 2026-04-02 08:23:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:23:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 08:23:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:23:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:23:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 08:23:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 08:23:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 08:23:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 08:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 714 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 255 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 47 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6303 KB; 2026-04-02 08:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 255 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 47 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6309 KB; 2026-04-02 08:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 698 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 257 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 47 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6293 KB; 2026-04-02 08:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 685 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 280 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; rules::ProcessConditionsCache: 98 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6391 KB; 2026-04-02 08:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 284 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6269 KB; 2026-04-02 08:28:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:28:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 08:28:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:28:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:28:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 08:28:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 08:28:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 08:28:55 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 08:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 688 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 286 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 47 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6346 KB; 2026-04-02 08:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 289 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::ProcessConditionsCache: 49 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6373 KB; 2026-04-02 08:30:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 08:22:59, To:, 2026-04-02 08:30:06, Duration (s):, 427, Events Per Second:, 0.234, Events:, 100, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 99, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13649 2026-04-02 08:30:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s899ms. 2026-04-02 08:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 827 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 287 KB; ModuleInfoCache: 122 KB; rules::ProcessConditionsCache: 120 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6572 KB; 2026-04-02 08:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 733 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 287 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 56 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6397 KB; 2026-04-02 08:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 693 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 287 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 85 KB; rules::ProcessConditionsCache: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6354 KB; 2026-04-02 08:33:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:33:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 08:33:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:33:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:33:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 08:33:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 08:33:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 08:33:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 08:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 290 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 85 KB; rules::ProcessConditionsCache: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6348 KB; 2026-04-02 08:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 757 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 306 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; rules::ProcessConditionsCache: 82 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6473 KB; 2026-04-02 08:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 308 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 74 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6404 KB; 2026-04-02 08:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 706 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 312 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 72 KB; rules::ProcessConditionsCache: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6423 KB; 2026-04-02 08:37:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 08:30:06, To:, 2026-04-02 08:37:06, Duration (s):, 420, Events Per Second:, 0.457, Events:, 192, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 143, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 24, Livegrid:, 24, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22590 2026-04-02 08:37:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s594ms. 2026-04-02 08:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 707 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 255 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 67 KB; rules::ProcessConditionsCache: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6327 KB; 2026-04-02 08:38:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:38:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 08:38:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:38:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:38:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 08:38:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 08:38:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 08:38:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 08:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 276 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; rules::ProcessConditionsCache: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6388 KB; 2026-04-02 08:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 729 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 299 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; rules::ProcessConditionsCache: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6415 KB; 2026-04-02 08:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 773 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 305 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; rules::ProcessConditionsCache: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6477 KB; 2026-04-02 08:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 892 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 351 KB; rules::ProcessConditionsCache: 172 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 85 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6806 KB; 2026-04-02 08:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 694 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 351 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 108 KB; CacheEntry: 107 KB; rules::ProcessConditionsCache: 76 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6483 KB; 2026-04-02 08:43:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:43:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 08:43:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:43:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:43:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 08:43:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 08:43:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 08:43:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 08:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 696 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 434 KB; rules::ProcessConditionsCache: 159 KB; TcpIpConnectionsManager: 144 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 60 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6742 KB; 2026-04-02 08:44:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 08:37:56, To:, 2026-04-02 08:44:06, Duration (s):, 370, Events Per Second:, 1.577, Events:, 584, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 527, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 56, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 68588 2026-04-02 08:44:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s507ms. 2026-04-02 08:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 835 KB; ModuleMetadata: 687 KB; ProcessInfo: 590 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 400 KB; TcpIpConnectionsManager: 233 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BaseEvent: 91 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7398 KB; 2026-04-02 08:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 857 KB; ProcessInfo: 713 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 239 KB; BaseEvent: 152 KB; rules::ProcessConditionsCache: 126 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7353 KB; 2026-04-02 08:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 847 KB; ProcessInfo: 738 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 556 KB; TcpIpConnectionsManager: 218 KB; BaseEvent: 165 KB; rules::ProcessConditionsCache: 156 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7399 KB; 2026-04-02 08:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 848 KB; ProcessInfo: 738 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 556 KB; BaseEvent: 167 KB; rules::ProcessConditionsCache: 156 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 120 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7306 KB; 2026-04-02 08:48:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:48:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 08:48:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:48:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:48:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 08:48:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 08:48:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 08:48:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 08:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 849 KB; ProcessInfo: 738 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 167 KB; rules::ProcessConditionsCache: 156 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7254 KB; 2026-04-02 08:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 784 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 205 KB; BaseEvent: 176 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 108 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 48 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7196 KB; 2026-04-02 08:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 790 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 710 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 179 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 108 KB; CacheEntry: 107 KB; BatchSerializer::EventsQueueTag: 49 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7222 KB; 2026-04-02 08:51:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 08:44:03, To:, 2026-04-02 08:51:06, Duration (s):, 423, Events Per Second:, 2.491, Events:, 1055, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 895, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 159, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 119174 2026-04-02 08:51:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s646ms. 2026-04-02 08:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 712 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 284 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 108 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6491 KB; 2026-04-02 08:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 693 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 286 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6446 KB; 2026-04-02 08:53:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:53:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 08:53:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:53:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:53:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 08:53:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 08:53:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 08:53:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 08:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 812 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 206 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 111 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6704 KB; 2026-04-02 08:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 171 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6477 KB; 2026-04-02 08:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 348 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 120 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6453 KB; 2026-04-02 08:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 704 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 381 KB; rules::ProcessConditionsCache: 239 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 120 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6704 KB; 2026-04-02 08:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 381 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 100 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6557 KB; 2026-04-02 08:58:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 08:52:13, To:, 2026-04-02 08:58:06, Duration (s):, 353, Events Per Second:, 0.747, Events:, 264, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 263, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31842 2026-04-02 08:58:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s118ms. 2026-04-02 08:58:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:58:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 08:58:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:58:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 08:58:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 08:58:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 08:58:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 08:58:56 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 08:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 707 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 175 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6466 KB; 2026-04-02 09:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 181 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6477 KB; 2026-04-02 09:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 788 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 232 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6706 KB; 2026-04-02 09:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 732 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 352 KB; rules::ProcessConditionsCache: 208 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 85 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6626 KB; 2026-04-02 09:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 714 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 352 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6612 KB; 2026-04-02 09:03:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:03:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 09:03:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:03:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:03:57 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 09:03:57 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 09:03:57 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 09:03:57 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 09:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6553 KB; 2026-04-02 09:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 717 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 203 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6604 KB; 2026-04-02 09:05:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 08:58:54, To:, 2026-04-02 09:05:06, Duration (s):, 372, Events Per Second:, 0.652, Events:, 243, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 240, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30821 2026-04-02 09:05:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s946ms. 2026-04-02 09:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 221 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6467 KB; 2026-04-02 09:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 684 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 203 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6489 KB; 2026-04-02 09:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 223 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 115 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 6477 KB; 2026-04-02 09:08:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:08:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 09:08:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:08:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:08:57 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 09:08:57 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 09:08:57 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 09:08:57 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 09:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 301 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6441 KB; 2026-04-02 09:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 633 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 371 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 46 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6630 KB; 2026-04-02 09:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 399 KB; rules::ProcessConditionsCache: 238 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 120 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6612 KB; 2026-04-02 09:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 414 KB; rules::ProcessConditionsCache: 232 KB; TcpIpConnectionsManager: 126 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6632 KB; 2026-04-02 09:12:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 09:04:59, To:, 2026-04-02 09:12:06, Duration (s):, 427, Events Per Second:, 1.011, Events:, 432, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 431, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53213 2026-04-02 09:12:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s832ms. 2026-04-02 09:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 687 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 351 KB; rules::ProcessConditionsCache: 221 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6604 KB; 2026-04-02 09:13:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:13:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 09:13:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:13:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:13:57 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 09:13:57 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 09:13:57 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 09:13:57 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 09:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 398 KB; rules::ProcessConditionsCache: 278 KB; TcpIpConnectionsManager: 134 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6696 KB; 2026-04-02 09:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 420 KB; rules::ProcessConditionsCache: 225 KB; TcpIpConnectionsManager: 141 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6654 KB; 2026-04-02 09:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 447 KB; rules::ProcessConditionsCache: 254 KB; TcpIpConnectionsManager: 162 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 46 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6733 KB; 2026-04-02 09:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 471 KB; rules::ProcessConditionsCache: 230 KB; TcpIpConnectionsManager: 157 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6702 KB; 2026-04-02 09:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 475 KB; rules::ProcessConditionsCache: 223 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 115 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6686 KB; 2026-04-02 09:18:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:18:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 09:18:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:18:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:18:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 09:18:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 09:18:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 09:18:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 09:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 481 KB; rules::ProcessConditionsCache: 229 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 46 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6782 KB; 2026-04-02 09:19:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 09:12:05, To:, 2026-04-02 09:19:06, Duration (s):, 421, Events Per Second:, 0.868, Events:, 366, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 363, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43547 2026-04-02 09:19:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s531ms. 2026-04-02 09:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 711 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 326 KB; rules::ProcessConditionsCache: 314 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 120 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6720 KB; 2026-04-02 09:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 614 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 240 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 113 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6539 KB; 2026-04-02 09:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 233 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 111 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6576 KB; 2026-04-02 09:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 231 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6580 KB; 2026-04-02 09:23:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:23:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 09:23:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:23:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:23:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 09:23:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 09:23:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 09:23:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 09:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 231 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6554 KB; 2026-04-02 09:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 235 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6580 KB; 2026-04-02 09:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 352 KB; rules::ProcessConditionsCache: 238 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6537 KB; 2026-04-02 09:26:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 09:19:13, To:, 2026-04-02 09:26:06, Duration (s):, 413, Events Per Second:, 0.489, Events:, 202, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 201, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25456 2026-04-02 09:26:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s692ms. 2026-04-02 09:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 255 KB; rules::ProcessConditionsCache: 236 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6395 KB; 2026-04-02 09:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 257 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6399 KB; 2026-04-02 09:28:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:28:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 09:28:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:28:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:28:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 09:28:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 09:28:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 09:28:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 09:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6379 KB; 2026-04-02 09:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 290 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6369 KB; 2026-04-02 09:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 98 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6402 KB; 2026-04-02 09:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 249 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 87 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6395 KB; 2026-04-02 09:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 249 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6384 KB; 2026-04-02 09:33:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 09:26:04, To:, 2026-04-02 09:33:06, Duration (s):, 422, Events Per Second:, 0.341, Events:, 144, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 135, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18928 2026-04-02 09:33:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s702ms. 2026-04-02 09:33:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:33:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 09:33:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:33:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:33:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 09:33:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 09:33:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 09:33:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 09:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::ProcessConditionsCache: 261 KB; ProcessInfo: 255 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6332 KB; 2026-04-02 09:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 261 KB; rules::ProcessConditionsCache: 254 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6330 KB; 2026-04-02 09:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::ProcessConditionsCache: 274 KB; ProcessInfo: 271 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6374 KB; 2026-04-02 09:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 259 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 100 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6376 KB; 2026-04-02 09:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 259 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 95 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6375 KB; 2026-04-02 09:38:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:38:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 09:38:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:38:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:38:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 09:38:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 09:38:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 09:38:58 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 09:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 259 KB; TcpIpConnectionsManager: 125 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6443 KB; 2026-04-02 09:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 395 KB; rules::ProcessConditionsCache: 263 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 113 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6540 KB; 2026-04-02 09:40:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 09:33:38, To:, 2026-04-02 09:40:06, Duration (s):, 388, Events Per Second:, 1.032, Events:, 401, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 400, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47969 2026-04-02 09:40:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s847ms. 2026-04-02 09:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 359 KB; rules::ProcessConditionsCache: 326 KB; TcpIpConnectionsManager: 136 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6573 KB; 2026-04-02 09:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 370 KB; rules::ProcessConditionsCache: 282 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 120 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6502 KB; 2026-04-02 09:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 703 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; TcpIpConnectionsManager: 239 KB; rules::ProcessConditionsCache: 227 KB; BaseEvent: 168 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BatchSerializer::EventsQueueTag: 47 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7109 KB; 2026-04-02 09:43:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:43:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 09:43:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:43:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:43:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 09:43:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 09:43:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 09:43:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 09:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 856 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 385 KB; TcpIpConnectionsManager: 307 KB; BaseEvent: 242 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BatchSerializer::EventsQueueTag: 67 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7601 KB; 2026-04-02 09:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 890 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; TcpIpConnectionsManager: 312 KB; BaseEvent: 252 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BatchSerializer::EventsQueueTag: 72 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7284 KB; 2026-04-02 09:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 893 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; BaseEvent: 253 KB; TcpIpConnectionsManager: 167 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; BatchSerializer::EventsQueueTag: 73 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7141 KB; 2026-04-02 09:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 893 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; BaseEvent: 255 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 95 KB; BatchSerializer::EventsQueueTag: 73 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7060 KB; 2026-04-02 09:47:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 09:40:11, To:, 2026-04-02 09:47:06, Duration (s):, 415, Events Per Second:, 3.651, Events:, 1517, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1293, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 223, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 169436 2026-04-02 09:47:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s039ms. 2026-04-02 09:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 296 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6123 KB; 2026-04-02 09:48:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:48:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 09:48:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:48:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:48:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 09:48:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 09:48:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 09:48:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 09:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 296 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 82 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6117 KB; 2026-04-02 09:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 309 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6158 KB; 2026-04-02 09:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 315 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6157 KB; 2026-04-02 09:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 130 KB; TcpIpConnectionsManager: 125 KB; ModuleInfoCache: 122 KB; CacheEntry: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6371 KB; 2026-04-02 09:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 687 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 362 KB; ModuleInfoCache: 122 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 107 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::ProcessConditionsCache: 42 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6283 KB; 2026-04-02 09:53:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:53:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 09:53:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:53:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:53:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 09:53:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 09:53:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 09:53:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 09:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 364 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::ProcessConditionsCache: 42 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6293 KB; 2026-04-02 09:54:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 09:47:04, To:, 2026-04-02 09:54:06, Duration (s):, 422, Events Per Second:, 0.582, Events:, 246, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 245, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29947 2026-04-02 09:54:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s935ms. 2026-04-02 09:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 287 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 46 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6171 KB; 2026-04-02 09:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 289 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::ProcessConditionsCache: 48 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6148 KB; 2026-04-02 09:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 289 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::ProcessConditionsCache: 48 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6138 KB; 2026-04-02 09:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 289 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::ProcessConditionsCache: 50 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6141 KB; 2026-04-02 09:58:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:58:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 09:58:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:58:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 09:58:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 09:58:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 09:58:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 09:58:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 09:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 289 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; TcpIpConnectionsManager: 56 KB; rules::ProcessConditionsCache: 50 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6147 KB; 2026-04-02 10:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 289 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; TcpIpConnectionsManager: 56 KB; rules::ProcessConditionsCache: 50 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6148 KB; 2026-04-02 10:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 302 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6184 KB; 2026-04-02 10:01:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 09:54:30, To:, 2026-04-02 10:01:06, Duration (s):, 396, Events Per Second:, 0.116, Events:, 46, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 40, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7435 2026-04-02 10:01:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s507ms. 2026-04-02 10:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 248 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6122 KB; 2026-04-02 10:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 258 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 69 KB; rules::ProcessConditionsCache: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6138 KB; 2026-04-02 10:03:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:03:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 10:03:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:03:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:03:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 10:03:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 10:03:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 10:03:59 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 10:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 264 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 74 KB; rules::ProcessConditionsCache: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6181 KB; 2026-04-02 10:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 309 KB; TcpIpConnectionsManager: 126 KB; ModuleInfoCache: 123 KB; rules::ProcessConditionsCache: 114 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6312 KB; 2026-04-02 10:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 314 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 115 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 66 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6239 KB; 2026-04-02 10:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 324 KB; TcpIpConnectionsManager: 123 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 90 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6272 KB; 2026-04-02 10:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 358 KB; TcpIpConnectionsManager: 126 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 97 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6329 KB; 2026-04-02 10:08:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 10:01:55, To:, 2026-04-02 10:08:06, Duration (s):, 371, Events Per Second:, 0.786, Events:, 292, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 291, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35269 2026-04-02 10:08:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s707ms. 2026-04-02 10:08:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:08:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 10:08:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:08:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:09:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 10:09:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 10:09:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 10:09:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 10:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 293 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 106 KB; rules::ProcessConditionsCache: 65 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6173 KB; 2026-04-02 10:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 359 KB; TcpIpConnectionsManager: 133 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 96 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6324 KB; 2026-04-02 10:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 365 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 95 KB; rules::ProcessConditionsCache: 76 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6278 KB; 2026-04-02 10:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 365 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 82 KB; rules::ProcessConditionsCache: 76 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6270 KB; 2026-04-02 10:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 367 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 67 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6259 KB; 2026-04-02 10:13:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:13:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 10:13:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:13:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:14:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 10:14:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 10:14:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 10:14:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 10:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 367 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6256 KB; 2026-04-02 10:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 367 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6257 KB; 2026-04-02 10:15:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 10:08:00, To:, 2026-04-02 10:15:06, Duration (s):, 426, Events Per Second:, 0.495, Events:, 211, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 210, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26946 2026-04-02 10:15:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s716ms. 2026-04-02 10:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 286 KB; rules::ProcessConditionsCache: 128 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 111 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6258 KB; 2026-04-02 10:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 289 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 79 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6192 KB; 2026-04-02 10:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 292 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 79 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6198 KB; 2026-04-02 10:18:48 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:18:48 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 10:18:48 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:18:48 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:19:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 10:19:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 10:19:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 10:19:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 10:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 293 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 79 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6175 KB; 2026-04-02 10:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 373 KB; rules::ProcessConditionsCache: 251 KB; TcpIpConnectionsManager: 146 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 76 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; Total: 6555 KB; 2026-04-02 10:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 387 KB; rules::ProcessConditionsCache: 286 KB; TcpIpConnectionsManager: 161 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 86 KB; cloudutils::CloudData: 46 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; Total: 6633 KB; 2026-04-02 10:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 427 KB; rules::ProcessConditionsCache: 396 KB; TcpIpConnectionsManager: 200 KB; ModuleInfoCache: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 110 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 13 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; Total: 6866 KB; 2026-04-02 10:22:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 10:15:08, To:, 2026-04-02 10:22:06, Duration (s):, 418, Events Per Second:, 0.867, Events:, 363, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 362, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51071 2026-04-02 10:22:10 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s833ms. 2026-04-02 10:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::ProcessConditionsCache: 395 KB; ProcessInfo: 371 KB; TcpIpConnectionsManager: 177 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 133 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6789 KB; 2026-04-02 10:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 10:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:24:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 10:24:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 10:24:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 10:24:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 10:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 395 KB; ProcessInfo: 371 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 205 KB; TcpIpConnectionsManager: 172 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 7005 KB; 2026-04-02 10:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 870 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 371 KB; rules::ProcessConditionsCache: 340 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 204 KB; TcpIpConnectionsManager: 170 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 7145 KB; 2026-04-02 10:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 922 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 377 KB; rules::ProcessConditionsCache: 213 KB; TcpIpConnectionsManager: 170 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 133 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; Total: 7012 KB; 2026-04-02 10:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 844 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 387 KB; TcpIpConnectionsManager: 184 KB; rules::ProcessConditionsCache: 149 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; Total: 6841 KB; 2026-04-02 10:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 845 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 411 KB; TcpIpConnectionsManager: 189 KB; rules::ProcessConditionsCache: 165 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; Total: 6893 KB; 2026-04-02 10:28:03 7ffa04ffa6c0 Error: Error while sending control request to server at "eu01.agent.edr.eset.systems:8093", certificate was set to: /CN=Agent=c771dbf0-85fb-4c94-8961-6227fa858111. getReply: End of file [asio.misc:2] 2026-04-02 10:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 10:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:29:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 10:29:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 10:29:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 10:29:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 10:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 805 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 433 KB; rules::ProcessConditionsCache: 182 KB; TcpIpConnectionsManager: 166 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; Total: 6874 KB; 2026-04-02 10:29:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 10:22:57, To:, 2026-04-02 10:29:06, Duration (s):, 369, Events Per Second:, 0.746, Events:, 276, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 275, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44095 2026-04-02 10:29:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s205ms. 2026-04-02 10:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 808 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 334 KB; rules::ProcessConditionsCache: 144 KB; TcpIpConnectionsManager: 129 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6663 KB; 2026-04-02 10:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 342 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 118 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6437 KB; 2026-04-02 10:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 367 KB; TcpIpConnectionsManager: 125 KB; ModuleInfoCache: 123 KB; rules::ProcessConditionsCache: 113 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6358 KB; 2026-04-02 10:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 400 KB; rules::ProcessConditionsCache: 172 KB; TcpIpConnectionsManager: 143 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6490 KB; 2026-04-02 10:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 10:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:34:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 10:34:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 10:34:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 10:34:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 10:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 428 KB; rules::ProcessConditionsCache: 157 KB; TcpIpConnectionsManager: 152 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6525 KB; 2026-04-02 10:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 428 KB; TcpIpConnectionsManager: 129 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 106 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6451 KB; 2026-04-02 10:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 465 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 148 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 46 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6572 KB; 2026-04-02 10:36:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 10:29:01, To:, 2026-04-02 10:36:06, Duration (s):, 425, Events Per Second:, 0.909, Events:, 387, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 386, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49049 2026-04-02 10:36:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s868ms. 2026-04-02 10:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 320 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 115 KB; rules::ProcessConditionsCache: 110 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6258 KB; 2026-04-02 10:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 343 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 121 KB; rules::ProcessConditionsCache: 117 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6300 KB; 2026-04-02 10:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 10:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:39:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 10:39:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 10:39:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 10:39:00 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 10:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 378 KB; TcpIpConnectionsManager: 133 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6371 KB; 2026-04-02 10:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 439 KB; TcpIpConnectionsManager: 134 KB; ModuleInfoCache: 123 KB; rules::ProcessConditionsCache: 119 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6450 KB; 2026-04-02 10:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 458 KB; TcpIpConnectionsManager: 133 KB; rules::ProcessConditionsCache: 132 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6497 KB; 2026-04-02 10:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 458 KB; ModuleInfoCache: 123 KB; rules::ProcessConditionsCache: 117 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6454 KB; 2026-04-02 10:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; rules::ProcessConditionsCache: 290 KB; TcpIpConnectionsManager: 156 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; BaseEvent: 52 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6795 KB; 2026-04-02 10:43:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 10:36:01, To:, 2026-04-02 10:43:06, Duration (s):, 425, Events Per Second:, 1.179, Events:, 502, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 501, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 64492 2026-04-02 10:43:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s224ms. 2026-04-02 10:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 10:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 326 KB; rules::ProcessConditionsCache: 158 KB; TcpIpConnectionsManager: 139 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6349 KB; 2026-04-02 10:44:01 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 10:44:01 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 10:44:01 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 10:44:01 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 10:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 326 KB; TcpIpConnectionsManager: 133 KB; ModuleInfoCache: 123 KB; rules::ProcessConditionsCache: 116 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6337 KB; 2026-04-02 10:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 339 KB; TcpIpConnectionsManager: 133 KB; rules::ProcessConditionsCache: 132 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6352 KB; 2026-04-02 10:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 339 KB; rules::ProcessConditionsCache: 123 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 85 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6291 KB; 2026-04-02 10:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 361 KB; rules::ProcessConditionsCache: 185 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 6396 KB; 2026-04-02 10:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:48:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 10:48:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:48:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 408 KB; rules::ProcessConditionsCache: 176 KB; TcpIpConnectionsManager: 123 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 46 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6457 KB; 2026-04-02 10:49:01 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 10:49:01 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 10:49:01 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 10:49:01 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 10:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 420 KB; TcpIpConnectionsManager: 146 KB; rules::ProcessConditionsCache: 132 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6447 KB; 2026-04-02 10:50:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 10:43:01, To:, 2026-04-02 10:50:06, Duration (s):, 425, Events Per Second:, 0.775, Events:, 330, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 329, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44601 2026-04-02 10:50:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s315ms. 2026-04-02 10:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 323 KB; TcpIpConnectionsManager: 146 KB; rules::ProcessConditionsCache: 131 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6305 KB; 2026-04-02 10:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 133 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 103 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6271 KB; 2026-04-02 10:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 370 KB; rules::ProcessConditionsCache: 151 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 111 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6366 KB; 2026-04-02 10:53:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:53:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 10:53:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:53:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 371 KB; rules::ProcessConditionsCache: 133 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 110 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6349 KB; 2026-04-02 10:54:01 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 10:54:01 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 10:54:01 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 10:54:01 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 10:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 377 KB; rules::ProcessConditionsCache: 133 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 113 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6363 KB; 2026-04-02 10:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 135 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 82 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6355 KB; 2026-04-02 10:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 393 KB; rules::ProcessConditionsCache: 144 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 46 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6390 KB; 2026-04-02 10:57:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 10:50:04, To:, 2026-04-02 10:57:06, Duration (s):, 422, Events Per Second:, 0.636, Events:, 269, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 200, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 34, Livegrid:, 34, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31393 2026-04-02 10:57:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s706ms. 2026-04-02 10:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 144 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 69 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6186 KB; 2026-04-02 10:58:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:58:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 10:58:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:58:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 10:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 144 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6175 KB; 2026-04-02 10:59:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 10:59:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 10:59:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 10:59:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 11:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 144 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6177 KB; 2026-04-02 11:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 144 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6205 KB; 2026-04-02 11:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 203 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 46 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6339 KB; 2026-04-02 11:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 212 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 46 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6379 KB; 2026-04-02 11:03:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:03:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 11:03:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:03:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 46 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6376 KB; 2026-04-02 11:04:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 11:04:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 11:04:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 11:04:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 11:04:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 10:56:25, To:, 2026-04-02 11:04:06, Duration (s):, 461, Events Per Second:, 0.465, Events:, 215, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 128, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 43, Livegrid:, 43, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25598 2026-04-02 11:04:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s645ms. 2026-04-02 11:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 211 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6318 KB; 2026-04-02 11:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 209 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6317 KB; 2026-04-02 11:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 314 KB; rules::ProcessConditionsCache: 213 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6344 KB; 2026-04-02 11:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6364 KB; 2026-04-02 11:08:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:08:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 11:08:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:08:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 213 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6373 KB; 2026-04-02 11:09:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 11:09:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 11:09:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 11:09:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 11:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 371 KB; rules::ProcessConditionsCache: 217 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; BaseEvent: 71 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6507 KB; 2026-04-02 11:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 387 KB; rules::ProcessConditionsCache: 221 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 79 KB; BaseEvent: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 46 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 6546 KB; 2026-04-02 11:11:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 11:04:46, To:, 2026-04-02 11:11:06, Duration (s):, 380, Events Per Second:, 1.137, Events:, 433, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 252, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 90, Livegrid:, 90, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47723 2026-04-02 11:11:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s784ms. 2026-04-02 11:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 315 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6357 KB; 2026-04-02 11:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 227 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6364 KB; 2026-04-02 11:13:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:13:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 11:13:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:13:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 227 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 7 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6360 KB; 2026-04-02 11:14:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 11:14:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 11:14:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 11:14:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 11:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 6 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6363 KB; 2026-04-02 11:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 326 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 7 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6370 KB; 2026-04-02 11:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 352 KB; rules::ProcessConditionsCache: 227 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; Total: 6429 KB; 2026-04-02 11:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 384 KB; rules::ProcessConditionsCache: 256 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 101 KB; BaseEvent: 50 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; Total: 6532 KB; 2026-04-02 11:18:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 11:10:58, To:, 2026-04-02 11:18:06, Duration (s):, 428, Events Per Second:, 0.683, Events:, 293, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 183, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 49, Livegrid:, 49, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33264 2026-04-02 11:18:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s695ms. 2026-04-02 11:18:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:18:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 11:18:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:18:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 253 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 99 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6366 KB; 2026-04-02 11:19:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 11:19:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 11:19:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 11:19:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 11:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6440 KB; 2026-04-02 11:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 352 KB; rules::ProcessConditionsCache: 314 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 47 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6503 KB; 2026-04-02 11:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 374 KB; rules::ProcessConditionsCache: 316 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 101 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6539 KB; 2026-04-02 11:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 423 KB; rules::ProcessConditionsCache: 384 KB; TcpIpConnectionsManager: 127 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6707 KB; 2026-04-02 11:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 11:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 446 KB; rules::ProcessConditionsCache: 367 KB; TcpIpConnectionsManager: 127 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; BaseEvent: 59 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6731 KB; 2026-04-02 11:24:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 11:24:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 11:24:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 11:24:03 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 11:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 470 KB; rules::ProcessConditionsCache: 417 KB; TcpIpConnectionsManager: 127 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; BaseEvent: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6823 KB; 2026-04-02 11:25:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 11:18:37, To:, 2026-04-02 11:25:06, Duration (s):, 389, Events Per Second:, 1.164, Events:, 454, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 405, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 48, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 54819 2026-04-02 11:25:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s318ms. 2026-04-02 11:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 367 KB; ProcessInfo: 339 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 114 KB; CacheEntry: 108 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6528 KB; 2026-04-02 11:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; rules::ProcessConditionsCache: 367 KB; ProcessInfo: 342 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6511 KB; 2026-04-02 11:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 373 KB; ProcessInfo: 346 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6522 KB; 2026-04-02 11:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 11:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; rules::ProcessConditionsCache: 369 KB; ProcessInfo: 346 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6503 KB; 2026-04-02 11:29:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 11:29:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 11:29:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 11:29:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 11:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 417 KB; TcpIpConnectionsManager: 124 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 68 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6364 KB; 2026-04-02 11:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 494 KB; rules::ProcessConditionsCache: 240 KB; TcpIpConnectionsManager: 189 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 47 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6713 KB; 2026-04-02 11:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; ProcessInfo: 584 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 387 KB; TcpIpConnectionsManager: 280 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 97 KB; BaseEvent: 59 KB; cloudutils::CloudData: 47 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7101 KB; 2026-04-02 11:32:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 11:25:01, To:, 2026-04-02 11:32:06, Duration (s):, 425, Events Per Second:, 1.315, Events:, 560, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 536, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 74023 2026-04-02 11:32:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s127ms. 2026-04-02 11:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 477 KB; rules::ProcessConditionsCache: 255 KB; TcpIpConnectionsManager: 239 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6726 KB; 2026-04-02 11:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 11:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 477 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 123 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6546 KB; 2026-04-02 11:34:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 11:34:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 11:34:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 11:34:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 11:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 478 KB; TcpIpConnectionsManager: 165 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 99 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6482 KB; 2026-04-02 11:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; rules::ProcessConditionsCache: 154 KB; TcpIpConnectionsManager: 135 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 47 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6597 KB; 2026-04-02 11:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 158 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 47 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6573 KB; 2026-04-02 11:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 689 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 156 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 47 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6567 KB; 2026-04-02 11:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 11:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; ProcessInfo: 577 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 63 KB; BaseEvent: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6626 KB; 2026-04-02 11:39:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 11:39:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 11:39:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 11:39:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 11:39:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 11:32:01, To:, 2026-04-02 11:39:06, Duration (s):, 425, Events Per Second:, 0.951, Events:, 405, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 378, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58712 2026-04-02 11:39:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s088ms. 2026-04-02 11:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 162 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6260 KB; 2026-04-02 11:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 194 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6354 KB; 2026-04-02 11:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 194 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; TcpIpConnectionsManager: 68 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6346 KB; 2026-04-02 11:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 74 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6367 KB; 2026-04-02 11:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 11:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 199 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6397 KB; 2026-04-02 11:44:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 11:44:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 11:44:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 11:44:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 11:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 423 KB; rules::ProcessConditionsCache: 278 KB; TcpIpConnectionsManager: 173 KB; ModuleInfoCache: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 111 KB; CacheEntry: 108 KB; cloudutils::CloudData: 47 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6763 KB; 2026-04-02 11:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 425 KB; rules::ProcessConditionsCache: 182 KB; TcpIpConnectionsManager: 173 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 88 KB; cloudutils::CloudData: 47 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6599 KB; 2026-04-02 11:46:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 11:40:04, To:, 2026-04-02 11:46:06, Duration (s):, 362, Events Per Second:, 0.849, Events:, 308, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 296, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40674 2026-04-02 11:46:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s704ms. 2026-04-02 11:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 348 KB; TcpIpConnectionsManager: 173 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 48 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6319 KB; 2026-04-02 11:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 421 KB; TcpIpConnectionsManager: 193 KB; ModuleInfoCache: 123 KB; rules::ProcessConditionsCache: 116 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 46 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6535 KB; 2026-04-02 11:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:48:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 11:48:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:48:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 738 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; TcpIpConnectionsManager: 283 KB; BaseEvent: 196 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; BatchSerializer::EventsQueueTag: 52 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 7097 KB; 2026-04-02 11:49:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 11:49:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 11:49:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 11:49:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 11:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 857 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; TcpIpConnectionsManager: 288 KB; BaseEvent: 255 KB; rules::ProcessConditionsCache: 184 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; BatchSerializer::EventsQueueTag: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7419 KB; 2026-04-02 11:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 885 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; BaseEvent: 269 KB; TcpIpConnectionsManager: 262 KB; rules::ProcessConditionsCache: 219 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; BatchSerializer::EventsQueueTag: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7455 KB; 2026-04-02 11:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 887 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; BaseEvent: 272 KB; rules::ProcessConditionsCache: 221 KB; TcpIpConnectionsManager: 125 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; BatchSerializer::EventsQueueTag: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7317 KB; 2026-04-02 11:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 900 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; BaseEvent: 276 KB; rules::ProcessConditionsCache: 223 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 84 KB; BatchSerializer::EventsQueueTag: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7292 KB; 2026-04-02 11:53:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 11:46:01, To:, 2026-04-02 11:53:06, Duration (s):, 425, Events Per Second:, 3.684, Events:, 1569, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1305, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 10, Livegrid:, 10, OriginUrl:, 0, Alarms:, 243, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 180452 2026-04-02 11:53:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s966ms. 2026-04-02 11:53:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:53:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 11:53:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:53:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 309 KB; rules::ProcessConditionsCache: 224 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 99 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6353 KB; 2026-04-02 11:54:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 11:54:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 11:54:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 11:54:04 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 11:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 315 KB; rules::ProcessConditionsCache: 226 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 106 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6373 KB; 2026-04-02 11:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 340 KB; rules::ProcessConditionsCache: 227 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 119 KB; CacheEntry: 108 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6421 KB; 2026-04-02 11:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 342 KB; rules::ProcessConditionsCache: 227 KB; ModuleInfoCache: 123 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6407 KB; 2026-04-02 11:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 695 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 378 KB; rules::ProcessConditionsCache: 266 KB; ModuleInfoCache: 123 KB; TcpIpConnectionsManager: 112 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 47 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6524 KB; 2026-04-02 11:58:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:58:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 11:58:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:58:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 11:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 696 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 427 KB; rules::ProcessConditionsCache: 299 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 106 KB; BaseEvent: 55 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6639 KB; 2026-04-02 11:59:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 11:59:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 11:59:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 11:59:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 12:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 696 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 428 KB; rules::ProcessConditionsCache: 303 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 106 KB; BaseEvent: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6653 KB; 2026-04-02 12:00:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 11:53:03, To:, 2026-04-02 12:00:06, Duration (s):, 423, Events Per Second:, 1.012, Events:, 429, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 392, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52114 2026-04-02 12:00:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s815ms. 2026-04-02 12:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 696 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 409 KB; rules::ProcessConditionsCache: 365 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6647 KB; 2026-04-02 12:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 696 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 436 KB; rules::ProcessConditionsCache: 393 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 48 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6691 KB; 2026-04-02 12:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 696 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 461 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 48 KB; rules::ProcessConditionsCache: 40 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6389 KB; 2026-04-02 12:03:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:03:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 12:03:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:03:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 696 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 502 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; TcpIpConnectionsManager: 142 KB; ModuleInfoCache: 124 KB; rules::ProcessConditionsCache: 115 KB; CacheEntry: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 48 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6562 KB; 2026-04-02 12:04:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 12:04:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 12:04:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 12:04:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 12:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 696 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 503 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; TcpIpConnectionsManager: 135 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 45 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6477 KB; 2026-04-02 12:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 696 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; TcpIpConnectionsManager: 150 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 58 KB; BaseEvent: 57 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6555 KB; 2026-04-02 12:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 696 KB; ProcessInfo: 565 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; TcpIpConnectionsManager: 157 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; BaseEvent: 65 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::ProcessConditionsCache: 36 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6572 KB; 2026-04-02 12:07:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 12:00:08, To:, 2026-04-02 12:07:06, Duration (s):, 418, Events Per Second:, 1.432, Events:, 600, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 574, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 69290 2026-04-02 12:07:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s835ms. 2026-04-02 12:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 696 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 333 KB; TcpIpConnectionsManager: 130 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6225 KB; 2026-04-02 12:08:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:08:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 12:08:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:08:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 334 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 48 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6201 KB; 2026-04-02 12:09:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 12:09:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 12:09:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 12:09:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 12:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 378 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 48 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6260 KB; 2026-04-02 12:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 384 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; TcpIpConnectionsManager: 58 KB; rules::ProcessConditionsCache: 50 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6277 KB; 2026-04-02 12:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 384 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; TcpIpConnectionsManager: 58 KB; rules::ProcessConditionsCache: 52 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6270 KB; 2026-04-02 12:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 396 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 71 KB; rules::ProcessConditionsCache: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6306 KB; 2026-04-02 12:13:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:13:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 12:13:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:13:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 424 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 86 KB; rules::ProcessConditionsCache: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 48 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6380 KB; 2026-04-02 12:14:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 12:14:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 12:14:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 12:14:05 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 12:14:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 12:06:59, To:, 2026-04-02 12:14:06, Duration (s):, 427, Events Per Second:, 0.570, Events:, 244, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 233, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 10, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31544 2026-04-02 12:14:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s699ms. 2026-04-02 12:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 282 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 86 KB; rules::ProcessConditionsCache: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6184 KB; 2026-04-02 12:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 286 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 87 KB; TcpIpConnectionsManager: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6198 KB; 2026-04-02 12:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 292 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 91 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6202 KB; 2026-04-02 12:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 299 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 95 KB; TcpIpConnectionsManager: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6220 KB; 2026-04-02 12:18:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:18:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 12:18:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:18:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 302 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 98 KB; TcpIpConnectionsManager: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6233 KB; 2026-04-02 12:19:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 12:19:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 12:19:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 12:19:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 12:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 305 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 95 KB; TcpIpConnectionsManager: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6231 KB; 2026-04-02 12:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 333 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 102 KB; TcpIpConnectionsManager: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6293 KB; 2026-04-02 12:21:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 12:14:02, To:, 2026-04-02 12:21:06, Duration (s):, 424, Events Per Second:, 0.315, Events:, 134, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 133, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18437 2026-04-02 12:21:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s115ms. 2026-04-02 12:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 137 KB; TcpIpConnectionsManager: 130 KB; ModuleInfoCache: 124 KB; CacheEntry: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6344 KB; 2026-04-02 12:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 698 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 330 KB; TcpIpConnectionsManager: 127 KB; ModuleInfoCache: 124 KB; rules::ProcessConditionsCache: 124 KB; CacheEntry: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6332 KB; 2026-04-02 12:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 12:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 336 KB; ModuleInfoCache: 126 KB; rules::ProcessConditionsCache: 124 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6346 KB; 2026-04-02 12:24:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 12:24:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 12:24:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 12:24:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 12:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 361 KB; rules::ProcessConditionsCache: 146 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 48 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6391 KB; 2026-04-02 12:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 367 KB; rules::ProcessConditionsCache: 152 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 48 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6406 KB; 2026-04-02 12:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 392 KB; rules::ProcessConditionsCache: 198 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 48 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6514 KB; 2026-04-02 12:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 440 KB; rules::ProcessConditionsCache: 211 KB; TcpIpConnectionsManager: 129 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; BaseEvent: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6610 KB; 2026-04-02 12:28:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 12:21:04, To:, 2026-04-02 12:28:06, Duration (s):, 422, Events Per Second:, 1.010, Events:, 427, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 393, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 33, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51921 2026-04-02 12:28:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s710ms. 2026-04-02 12:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 12:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 180 KB; TcpIpConnectionsManager: 129 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6377 KB; 2026-04-02 12:29:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 12:29:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 12:29:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 12:29:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 12:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 171 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 119 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6360 KB; 2026-04-02 12:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 355 KB; rules::ProcessConditionsCache: 213 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6442 KB; 2026-04-02 12:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 217 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6436 KB; 2026-04-02 12:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 359 KB; rules::ProcessConditionsCache: 213 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6451 KB; 2026-04-02 12:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 12:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 387 KB; rules::ProcessConditionsCache: 246 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; cloudutils::CloudData: 48 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6544 KB; 2026-04-02 12:34:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 12:34:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 12:34:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 12:34:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 12:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 246 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 74 KB; cloudutils::CloudData: 48 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6534 KB; 2026-04-02 12:35:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 12:28:01, To:, 2026-04-02 12:35:06, Duration (s):, 425, Events Per Second:, 0.486, Events:, 207, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 182, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27496 2026-04-02 12:35:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s695ms. 2026-04-02 12:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 269 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6444 KB; 2026-04-02 12:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 300 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 72 KB; cloudutils::CloudData: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6525 KB; 2026-04-02 12:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 710 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 297 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; cloudutils::CloudData: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6524 KB; 2026-04-02 12:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 12:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 295 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; cloudutils::CloudData: 49 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6517 KB; 2026-04-02 12:39:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 12:39:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 12:39:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 12:39:06 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 12:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 384 KB; rules::ProcessConditionsCache: 302 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; cloudutils::CloudData: 49 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6588 KB; 2026-04-02 12:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 415 KB; rules::ProcessConditionsCache: 332 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; BaseEvent: 50 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6678 KB; 2026-04-02 12:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 461 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 125 KB; CacheEntry: 111 KB; rules::ProcessConditionsCache: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; BaseEvent: 57 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6521 KB; 2026-04-02 12:42:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 12:35:08, To:, 2026-04-02 12:42:06, Duration (s):, 418, Events Per Second:, 1.136, Events:, 476, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 441, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58971 2026-04-02 12:42:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s909ms. 2026-04-02 12:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 321 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 124 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 49 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6236 KB; 2026-04-02 12:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 12:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 327 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 49 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6286 KB; 2026-04-02 12:44:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 12:44:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 12:44:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 12:44:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 12:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 337 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6234 KB; 2026-04-02 12:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 340 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6226 KB; 2026-04-02 12:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 342 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 49 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6230 KB; 2026-04-02 12:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 412 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 124 KB; CacheEntry: 111 KB; rules::ProcessConditionsCache: 104 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6434 KB; 2026-04-02 12:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:48:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 12:48:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:48:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 436 KB; TcpIpConnectionsManager: 148 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6451 KB; 2026-04-02 12:49:06 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 12:42:01, To:, 2026-04-02 12:49:06, Duration (s):, 425, Events Per Second:, 0.765, Events:, 326, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 313, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41742 2026-04-02 12:49:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 12:49:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 12:49:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 12:49:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 12:49:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s832ms. 2026-04-02 12:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 337 KB; TcpIpConnectionsManager: 147 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; rules::ProcessConditionsCache: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6308 KB; 2026-04-02 12:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 437 KB; rules::ProcessConditionsCache: 171 KB; TcpIpConnectionsManager: 153 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 49 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6580 KB; 2026-04-02 12:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 725 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; TcpIpConnectionsManager: 235 KB; BaseEvent: 188 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; BatchSerializer::EventsQueueTag: 50 KB; cloudutils::CloudData: 49 KB; rules::ProcessConditionsCache: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6989 KB; 2026-04-02 12:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 850 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; TcpIpConnectionsManager: 289 KB; BaseEvent: 247 KB; rules::ProcessConditionsCache: 206 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; BatchSerializer::EventsQueueTag: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7416 KB; 2026-04-02 12:53:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:53:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 12:53:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:53:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 853 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 250 KB; TcpIpConnectionsManager: 243 KB; rules::ProcessConditionsCache: 206 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; BatchSerializer::EventsQueueTag: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7400 KB; 2026-04-02 12:54:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 12:54:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 12:54:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 12:54:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 12:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 854 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; BaseEvent: 253 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 111 KB; BatchSerializer::EventsQueueTag: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7293 KB; 2026-04-02 12:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 881 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 259 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 91 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7296 KB; 2026-04-02 12:56:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 12:50:06, To:, 2026-04-02 12:56:06, Duration (s):, 360, Events Per Second:, 4.075, Events:, 1471, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1240, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 230, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 165908 2026-04-02 12:56:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s269ms. 2026-04-02 12:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 301 KB; rules::ProcessConditionsCache: 251 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 119 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6458 KB; 2026-04-02 12:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 301 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 119 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6380 KB; 2026-04-02 12:58:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:58:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 12:58:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:58:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 12:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 207 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6375 KB; 2026-04-02 12:59:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 12:59:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 12:59:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 12:59:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 13:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6366 KB; 2026-04-02 13:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 224 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6405 KB; 2026-04-02 13:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 224 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6401 KB; 2026-04-02 13:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 326 KB; rules::ProcessConditionsCache: 231 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 76 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6427 KB; 2026-04-02 13:03:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 12:56:11, To:, 2026-04-02 13:03:07, Duration (s):, 416, Events Per Second:, 0.327, Events:, 136, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 135, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19123 2026-04-02 13:03:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s725ms. 2026-04-02 13:03:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:03:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 13:03:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:03:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 117 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6479 KB; 2026-04-02 13:04:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 13:04:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 13:04:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 13:04:07 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 13:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 114 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 6400 KB; 2026-04-02 13:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 229 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 117 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6426 KB; 2026-04-02 13:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6400 KB; 2026-04-02 13:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 63 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6383 KB; 2026-04-02 13:08:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:08:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 13:08:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:08:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 76 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6391 KB; 2026-04-02 13:09:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 13:09:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 13:09:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 13:09:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 13:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 227 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 49 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6457 KB; 2026-04-02 13:10:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 13:03:01, To:, 2026-04-02 13:10:07, Duration (s):, 426, Events Per Second:, 0.638, Events:, 272, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 271, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34322 2026-04-02 13:10:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s051ms. 2026-04-02 13:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 290 KB; rules::ProcessConditionsCache: 234 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 79 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6373 KB; 2026-04-02 13:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 480 KB; ProcessInfo: 293 KB; rules::ProcessConditionsCache: 236 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 76 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6367 KB; 2026-04-02 13:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 481 KB; ProcessInfo: 315 KB; rules::ProcessConditionsCache: 238 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6401 KB; 2026-04-02 13:13:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:13:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 13:13:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:13:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 481 KB; ProcessInfo: 340 KB; rules::ProcessConditionsCache: 236 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 114 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6451 KB; 2026-04-02 13:14:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 13:14:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 13:14:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 13:14:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 13:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 345 KB; rules::ProcessConditionsCache: 236 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6463 KB; 2026-04-02 13:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 371 KB; rules::ProcessConditionsCache: 238 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 117 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6501 KB; 2026-04-02 13:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 393 KB; rules::ProcessConditionsCache: 236 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6531 KB; 2026-04-02 13:17:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 13:10:02, To:, 2026-04-02 13:17:07, Duration (s):, 425, Events Per Second:, 0.706, Events:, 300, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 299, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36099 2026-04-02 13:17:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s702ms. 2026-04-02 13:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 348 KB; rules::ProcessConditionsCache: 316 KB; TcpIpConnectionsManager: 143 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6567 KB; 2026-04-02 13:18:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:18:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 13:18:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:18:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 348 KB; rules::ProcessConditionsCache: 251 KB; TcpIpConnectionsManager: 142 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6497 KB; 2026-04-02 13:19:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 13:19:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 13:19:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 13:19:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 13:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 348 KB; rules::ProcessConditionsCache: 237 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6468 KB; 2026-04-02 13:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 248 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 117 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6499 KB; 2026-04-02 13:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 479 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 244 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6444 KB; 2026-04-02 13:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 364 KB; rules::ProcessConditionsCache: 255 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6489 KB; 2026-04-02 13:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 13:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 365 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6468 KB; 2026-04-02 13:24:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 13:17:36, To:, 2026-04-02 13:24:07, Duration (s):, 391, Events Per Second:, 0.509, Events:, 199, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 190, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25229 2026-04-02 13:24:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 13:24:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 13:24:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 13:24:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 13:24:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s672ms. 2026-04-02 13:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; rules::ProcessConditionsCache: 256 KB; ProcessInfo: 254 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6324 KB; 2026-04-02 13:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 258 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6337 KB; 2026-04-02 13:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 256 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6343 KB; 2026-04-02 13:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 258 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6358 KB; 2026-04-02 13:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 13:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 289 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 101 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6447 KB; 2026-04-02 13:29:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 13:29:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 13:29:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 13:29:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 13:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 258 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6407 KB; 2026-04-02 13:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 264 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6427 KB; 2026-04-02 13:31:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 13:24:07, To:, 2026-04-02 13:31:07, Duration (s):, 420, Events Per Second:, 0.348, Events:, 146, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 145, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19087 2026-04-02 13:31:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s638ms. 2026-04-02 13:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 480 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 270 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6403 KB; 2026-04-02 13:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 268 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6396 KB; 2026-04-02 13:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 13:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 270 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6408 KB; 2026-04-02 13:34:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 13:34:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 13:34:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 13:34:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 13:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 270 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6438 KB; 2026-04-02 13:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 348 KB; rules::ProcessConditionsCache: 338 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 112 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 6583 KB; 2026-04-02 13:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 370 KB; rules::ProcessConditionsCache: 298 KB; TcpIpConnectionsManager: 135 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 6594 KB; 2026-04-02 13:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 387 KB; rules::ProcessConditionsCache: 272 KB; TcpIpConnectionsManager: 129 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6581 KB; 2026-04-02 13:38:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 13:31:16, To:, 2026-04-02 13:38:07, Duration (s):, 411, Events Per Second:, 0.762, Events:, 313, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 312, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37584 2026-04-02 13:38:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s350ms. 2026-04-02 13:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 13:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 377 KB; rules::ProcessConditionsCache: 349 KB; TcpIpConnectionsManager: 157 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6676 KB; 2026-04-02 13:39:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 13:39:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 13:39:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 13:39:08 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 13:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 785 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 389 KB; TcpIpConnectionsManager: 306 KB; BaseEvent: 210 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; BatchSerializer::EventsQueueTag: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7531 KB; 2026-04-02 13:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 957 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; TcpIpConnectionsManager: 345 KB; BaseEvent: 299 KB; rules::ProcessConditionsCache: 163 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; BatchSerializer::EventsQueueTag: 83 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7606 KB; 2026-04-02 13:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 957 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; TcpIpConnectionsManager: 314 KB; BaseEvent: 299 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; BatchSerializer::EventsQueueTag: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7574 KB; 2026-04-02 13:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 969 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; BaseEvent: 304 KB; TcpIpConnectionsManager: 171 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; BatchSerializer::EventsQueueTag: 85 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7449 KB; 2026-04-02 13:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 13:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 969 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; BaseEvent: 307 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; BatchSerializer::EventsQueueTag: 86 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7352 KB; 2026-04-02 13:44:09 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 13:44:09 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 13:44:09 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 13:44:09 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 13:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 979 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; BaseEvent: 307 KB; rules::ProcessConditionsCache: 180 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; BatchSerializer::EventsQueueTag: 87 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7427 KB; 2026-04-02 13:45:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 13:38:09, To:, 2026-04-02 13:45:07, Duration (s):, 418, Events Per Second:, 4.361, Events:, 1823, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1557, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 265, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 205005 2026-04-02 13:45:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s933ms. 2026-04-02 13:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6278 KB; 2026-04-02 13:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 235 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 112 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6412 KB; 2026-04-02 13:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 314 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 125 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6378 KB; 2026-04-02 13:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:48:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 13:48:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:48:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 176 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 122 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6388 KB; 2026-04-02 13:49:09 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 13:49:09 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 13:49:09 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 13:49:09 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 13:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 345 KB; rules::ProcessConditionsCache: 189 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 120 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6435 KB; 2026-04-02 13:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 367 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6449 KB; 2026-04-02 13:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 478 KB; ProcessInfo: 386 KB; rules::ProcessConditionsCache: 198 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 125 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6497 KB; 2026-04-02 13:52:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 13:44:54, To:, 2026-04-02 13:52:07, Duration (s):, 433, Events Per Second:, 0.781, Events:, 338, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 337, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40780 2026-04-02 13:52:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s712ms. 2026-04-02 13:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 194 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6364 KB; 2026-04-02 13:53:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:53:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 13:53:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:53:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 178 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6331 KB; 2026-04-02 13:54:09 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 13:54:09 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 13:54:09 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 13:54:09 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 13:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 178 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6321 KB; 2026-04-02 13:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 178 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6326 KB; 2026-04-02 13:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 6338 KB; 2026-04-02 13:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6342 KB; 2026-04-02 13:58:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:58:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 13:58:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:58:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 13:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6348 KB; 2026-04-02 13:59:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 13:52:01, To:, 2026-04-02 13:59:07, Duration (s):, 426, Events Per Second:, 0.108, Events:, 46, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 45, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7928 2026-04-02 13:59:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s677ms. 2026-04-02 13:59:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 13:59:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 13:59:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 13:59:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 14:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 245 KB; rules::ProcessConditionsCache: 184 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6259 KB; 2026-04-02 14:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6300 KB; 2026-04-02 14:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 261 KB; rules::ProcessConditionsCache: 203 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6297 KB; 2026-04-02 14:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 261 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6286 KB; 2026-04-02 14:03:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:03:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 14:03:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:03:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 6286 KB; 2026-04-02 14:04:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 14:04:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 14:04:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 14:04:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 14:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; TcpIpConnectionsManager: 63 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6295 KB; 2026-04-02 14:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 271 KB; rules::ProcessConditionsCache: 199 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6306 KB; 2026-04-02 14:06:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 13:59:55, To:, 2026-04-02 14:06:07, Duration (s):, 372, Events Per Second:, 0.183, Events:, 68, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 67, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10941 2026-04-02 14:06:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s495ms. 2026-04-02 14:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 276 KB; rules::ProcessConditionsCache: 209 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 91 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6333 KB; 2026-04-02 14:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 276 KB; rules::ProcessConditionsCache: 196 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6317 KB; 2026-04-02 14:08:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:08:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 14:08:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:08:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 293 KB; rules::ProcessConditionsCache: 209 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 6354 KB; 2026-04-02 14:09:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 14:09:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 14:09:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 14:09:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 14:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 352 KB; rules::ProcessConditionsCache: 253 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6500 KB; 2026-04-02 14:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 209 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6452 KB; 2026-04-02 14:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 361 KB; rules::ProcessConditionsCache: 211 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 49 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6451 KB; 2026-04-02 14:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 214 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 49 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6456 KB; 2026-04-02 14:13:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 14:06:15, To:, 2026-04-02 14:13:07, Duration (s):, 412, Events Per Second:, 0.721, Events:, 297, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 296, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36726 2026-04-02 14:13:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s651ms. 2026-04-02 14:13:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:13:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 14:13:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:13:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 218 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6309 KB; 2026-04-02 14:14:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 14:14:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 14:14:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 14:14:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 14:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 212 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6300 KB; 2026-04-02 14:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 214 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6310 KB; 2026-04-02 14:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 274 KB; rules::ProcessConditionsCache: 218 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6331 KB; 2026-04-02 14:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 277 KB; rules::ProcessConditionsCache: 216 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6333 KB; 2026-04-02 14:18:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:18:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 14:18:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:18:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 227 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 6360 KB; 2026-04-02 14:19:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 14:19:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 14:19:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 14:19:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 14:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 218 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 6358 KB; 2026-04-02 14:20:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 14:13:35, To:, 2026-04-02 14:20:07, Duration (s):, 392, Events Per Second:, 0.227, Events:, 89, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 88, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12822 2026-04-02 14:20:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s641ms. 2026-04-02 14:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 287 KB; rules::ProcessConditionsCache: 258 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6412 KB; 2026-04-02 14:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 280 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 6485 KB; 2026-04-02 14:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 326 KB; rules::ProcessConditionsCache: 225 KB; TcpIpConnectionsManager: 127 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6437 KB; 2026-04-02 14:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 14:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 285 KB; TcpIpConnectionsManager: 138 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6548 KB; 2026-04-02 14:24:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 14:24:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 14:24:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 14:24:10 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 14:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 359 KB; rules::ProcessConditionsCache: 230 KB; TcpIpConnectionsManager: 135 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6500 KB; 2026-04-02 14:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 365 KB; rules::ProcessConditionsCache: 232 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6505 KB; 2026-04-02 14:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 283 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 117 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 49 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6618 KB; 2026-04-02 14:27:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 14:20:01, To:, 2026-04-02 14:27:07, Duration (s):, 426, Events Per Second:, 0.777, Events:, 331, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 330, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41223 2026-04-02 14:27:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s608ms. 2026-04-02 14:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 228 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 6359 KB; 2026-04-02 14:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 14:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 228 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6368 KB; 2026-04-02 14:29:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 14:29:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 14:29:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 14:29:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 14:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 228 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6370 KB; 2026-04-02 14:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 236 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6374 KB; 2026-04-02 14:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 480 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6407 KB; 2026-04-02 14:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 479 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 234 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 76 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6384 KB; 2026-04-02 14:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 14:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 481 KB; ProcessInfo: 340 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6437 KB; 2026-04-02 14:34:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 14:27:01, To:, 2026-04-02 14:34:07, Duration (s):, 426, Events Per Second:, 0.345, Events:, 147, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 146, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21177 2026-04-02 14:34:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s039ms. 2026-04-02 14:34:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 14:34:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 14:34:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 14:34:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 14:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 286 KB; rules::ProcessConditionsCache: 239 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6363 KB; 2026-04-02 14:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 290 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6373 KB; 2026-04-02 14:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 305 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6505 KB; 2026-04-02 14:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 283 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 125 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6543 KB; 2026-04-02 14:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 14:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 370 KB; rules::ProcessConditionsCache: 254 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 124 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6626 KB; 2026-04-02 14:39:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 14:39:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 14:39:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 14:39:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 14:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 418 KB; rules::ProcessConditionsCache: 256 KB; TcpIpConnectionsManager: 138 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6697 KB; 2026-04-02 14:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 447 KB; rules::ProcessConditionsCache: 307 KB; ModuleInfoCache: 126 KB; TcpIpConnectionsManager: 125 KB; CacheEntry: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6742 KB; 2026-04-02 14:41:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 14:34:13, To:, 2026-04-02 14:41:07, Duration (s):, 414, Events Per Second:, 1.080, Events:, 447, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 444, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 54315 2026-04-02 14:41:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s828ms. 2026-04-02 14:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 346 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6471 KB; 2026-04-02 14:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 346 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6463 KB; 2026-04-02 14:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 14:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 346 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6490 KB; 2026-04-02 14:44:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 14:44:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 14:44:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 14:44:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 14:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ProcessInfo: 346 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6454 KB; 2026-04-02 14:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 254 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6465 KB; 2026-04-02 14:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 254 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6487 KB; 2026-04-02 14:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 254 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6491 KB; 2026-04-02 14:48:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 14:41:01, To:, 2026-04-02 14:48:07, Duration (s):, 426, Events Per Second:, 0.070, Events:, 30, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 29, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6086 2026-04-02 14:48:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s692ms. 2026-04-02 14:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:48:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 14:48:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:48:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; rules::ProcessConditionsCache: 254 KB; ProcessInfo: 239 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6369 KB; 2026-04-02 14:49:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 14:49:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 14:49:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 14:49:11 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 14:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; rules::ProcessConditionsCache: 337 KB; ProcessInfo: 286 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6552 KB; 2026-04-02 14:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 290 KB; rules::ProcessConditionsCache: 261 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 109 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6441 KB; 2026-04-02 14:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 290 KB; rules::ProcessConditionsCache: 261 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 109 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6431 KB; 2026-04-02 14:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 290 KB; rules::ProcessConditionsCache: 261 KB; ModuleInfoCache: 126 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 104 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6430 KB; 2026-04-02 14:53:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:53:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 14:53:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:53:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 263 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6400 KB; 2026-04-02 14:54:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 14:54:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 14:54:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 14:54:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 14:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 263 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6403 KB; 2026-04-02 14:55:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 14:49:42, To:, 2026-04-02 14:55:07, Duration (s):, 325, Events Per Second:, 0.452, Events:, 147, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 146, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19020 2026-04-02 14:55:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s519ms. 2026-04-02 14:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; rules::ProcessConditionsCache: 264 KB; ProcessInfo: 242 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6338 KB; 2026-04-02 14:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 264 KB; ProcessInfo: 243 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6343 KB; 2026-04-02 14:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 268 KB; ProcessInfo: 246 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6361 KB; 2026-04-02 14:58:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:58:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 14:58:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:58:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 14:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 294 KB; ProcessInfo: 246 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6396 KB; 2026-04-02 14:59:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 14:59:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 14:59:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 14:59:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 15:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 297 KB; ProcessInfo: 248 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6404 KB; 2026-04-02 15:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::ProcessConditionsCache: 323 KB; ProcessInfo: 304 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 49 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6541 KB; 2026-04-02 15:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::ProcessConditionsCache: 330 KB; ProcessInfo: 306 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; BaseEvent: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 49 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6611 KB; 2026-04-02 15:02:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 14:56:03, To:, 2026-04-02 15:02:07, Duration (s):, 364, Events Per Second:, 1.167, Events:, 425, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 158, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 133, Livegrid:, 133, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42070 2026-04-02 15:02:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s794ms. 2026-04-02 15:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::ProcessConditionsCache: 330 KB; ProcessInfo: 299 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6494 KB; 2026-04-02 15:03:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:03:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 15:03:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:03:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::ProcessConditionsCache: 330 KB; ProcessInfo: 299 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6494 KB; 2026-04-02 15:04:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 15:04:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 15:04:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 15:04:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 15:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::ProcessConditionsCache: 330 KB; ProcessInfo: 299 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6494 KB; 2026-04-02 15:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::ProcessConditionsCache: 330 KB; ProcessInfo: 299 KB; ModuleInfoCache: 127 KB; CacheEntry: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6494 KB; 2026-04-02 15:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 377 KB; rules::ProcessConditionsCache: 352 KB; ModuleInfoCache: 128 KB; TcpIpConnectionsManager: 119 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6619 KB; 2026-04-02 15:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 354 KB; TcpIpConnectionsManager: 130 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6648 KB; 2026-04-02 15:08:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:08:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 15:08:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:08:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 392 KB; rules::ProcessConditionsCache: 352 KB; TcpIpConnectionsManager: 130 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6656 KB; 2026-04-02 15:09:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 15:00:55, To:, 2026-04-02 15:09:07, Duration (s):, 492, Events Per Second:, 0.506, Events:, 249, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 246, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31534 2026-04-02 15:09:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s633ms. 2026-04-02 15:09:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 15:09:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 15:09:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 15:09:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 15:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 374 KB; rules::ProcessConditionsCache: 359 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6647 KB; 2026-04-02 15:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 386 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 48 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6687 KB; 2026-04-02 15:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 76 KB; cloudutils::CloudData: 48 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6661 KB; 2026-04-02 15:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 74 KB; BaseEvent: 48 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6664 KB; 2026-04-02 15:13:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:13:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 15:13:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:13:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 402 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 81 KB; BaseEvent: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6689 KB; 2026-04-02 15:14:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 15:14:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 15:14:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 15:14:12 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 15:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 402 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 50 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6681 KB; 2026-04-02 15:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 415 KB; rules::ProcessConditionsCache: 381 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 83 KB; BaseEvent: 54 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6725 KB; 2026-04-02 15:16:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 15:09:01, To:, 2026-04-02 15:16:07, Duration (s):, 426, Events Per Second:, 0.831, Events:, 354, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 233, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 60, Livegrid:, 60, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39276 2026-04-02 15:16:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s954ms. 2026-04-02 15:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; rules::ProcessConditionsCache: 365 KB; ProcessInfo: 268 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6454 KB; 2026-04-02 15:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 367 KB; ProcessInfo: 283 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6485 KB; 2026-04-02 15:18:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:18:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 15:18:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:18:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; rules::ProcessConditionsCache: 369 KB; ProcessInfo: 284 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6494 KB; 2026-04-02 15:19:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 15:19:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 15:19:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 15:19:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 15:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; rules::ProcessConditionsCache: 389 KB; ProcessInfo: 296 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6531 KB; 2026-04-02 15:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 374 KB; ProcessInfo: 301 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6508 KB; 2026-04-02 15:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; rules::ProcessConditionsCache: 376 KB; ProcessInfo: 302 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6519 KB; 2026-04-02 15:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 714 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 324 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6227 KB; 2026-04-02 15:23:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 15:16:13, To:, 2026-04-02 15:23:07, Duration (s):, 414, Events Per Second:, 0.377, Events:, 156, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 153, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20495 2026-04-02 15:23:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s695ms. 2026-04-02 15:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 15:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 280 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6161 KB; 2026-04-02 15:24:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 15:24:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 15:24:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 15:24:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 15:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 280 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6161 KB; 2026-04-02 15:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 289 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 48 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6181 KB; 2026-04-02 15:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 289 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 48 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6229 KB; 2026-04-02 15:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 311 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 86 KB; rules::ProcessConditionsCache: 51 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6296 KB; 2026-04-02 15:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 15:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 311 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6319 KB; 2026-04-02 15:29:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 15:29:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 15:29:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 15:29:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 15:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 311 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 48 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6324 KB; 2026-04-02 15:30:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 15:23:24, To:, 2026-04-02 15:30:07, Duration (s):, 403, Events Per Second:, 0.241, Events:, 97, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 94, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13350 2026-04-02 15:30:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s591ms. 2026-04-02 15:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 273 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 65 KB; rules::ProcessConditionsCache: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6277 KB; 2026-04-02 15:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 635 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 273 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::ProcessConditionsCache: 54 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6294 KB; 2026-04-02 15:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 284 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 71 KB; rules::ProcessConditionsCache: 54 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6210 KB; 2026-04-02 15:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 15:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 290 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 76 KB; rules::ProcessConditionsCache: 58 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6232 KB; 2026-04-02 15:34:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 15:34:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 15:34:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 15:34:13 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 15:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 315 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 106 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6303 KB; 2026-04-02 15:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 320 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 93 KB; rules::ProcessConditionsCache: 56 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6307 KB; 2026-04-02 15:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 330 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 99 KB; rules::ProcessConditionsCache: 56 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6313 KB; 2026-04-02 15:37:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 15:30:13, To:, 2026-04-02 15:37:07, Duration (s):, 414, Events Per Second:, 0.415, Events:, 172, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 169, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21859 2026-04-02 15:37:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s935ms. 2026-04-02 15:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 295 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 91 KB; rules::ProcessConditionsCache: 63 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6221 KB; 2026-04-02 15:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 15:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 317 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 63 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6249 KB; 2026-04-02 15:39:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 15:39:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 15:39:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 15:39:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 15:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 362 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 96 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6313 KB; 2026-04-02 15:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 370 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6335 KB; 2026-04-02 15:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 374 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; rules::ProcessConditionsCache: 74 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6320 KB; 2026-04-02 15:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 377 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 48 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6364 KB; 2026-04-02 15:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 15:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 377 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 48 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6364 KB; 2026-04-02 15:44:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 15:37:19, To:, 2026-04-02 15:44:07, Duration (s):, 408, Events Per Second:, 0.713, Events:, 291, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 254, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 18, Livegrid:, 18, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35665 2026-04-02 15:44:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s686ms. 2026-04-02 15:44:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 15:44:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 15:44:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 15:44:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 15:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 251 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6178 KB; 2026-04-02 15:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 279 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; rules::ProcessConditionsCache: 87 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6220 KB; 2026-04-02 15:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 304 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 112 KB; rules::ProcessConditionsCache: 89 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6270 KB; 2026-04-02 15:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 326 KB; TcpIpConnectionsManager: 138 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6311 KB; 2026-04-02 15:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:48:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 15:48:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:48:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 329 KB; ModuleInfoCache: 128 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 113 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6298 KB; 2026-04-02 15:49:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 15:49:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 15:49:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 15:49:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 15:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 379 KB; TcpIpConnectionsManager: 209 KB; BaseEvent: 169 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7177 KB; 2026-04-02 15:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 934 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; rules::ProcessConditionsCache: 365 KB; TcpIpConnectionsManager: 326 KB; BaseEvent: 317 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; BatchSerializer::EventsQueueTag: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7797 KB; 2026-04-02 15:51:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 15:44:55, To:, 2026-04-02 15:51:07, Duration (s):, 372, Events Per Second:, 5.020, Events:, 1868, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1552, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 20, Livegrid:, 20, OriginUrl:, 0, Alarms:, 275, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 207918 2026-04-02 15:51:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s736ms. 2026-04-02 15:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 850 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; TcpIpConnectionsManager: 324 KB; rules::ProcessConditionsCache: 307 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7236 KB; 2026-04-02 15:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 859 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 309 KB; TcpIpConnectionsManager: 212 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 7138 KB; 2026-04-02 15:53:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:53:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 15:53:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:53:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 957 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; rules::ProcessConditionsCache: 412 KB; TcpIpConnectionsManager: 132 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; BaseEvent: 52 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7328 KB; 2026-04-02 15:54:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 15:54:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 15:54:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 15:54:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 15:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 1058 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; TcpIpConnectionsManager: 152 KB; ModuleInfoCache: 128 KB; rules::ProcessConditionsCache: 123 KB; CacheEntry: 113 KB; BaseEvent: 104 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7228 KB; 2026-04-02 15:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 1224 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; rules::ProcessConditionsCache: 290 KB; TcpIpConnectionsManager: 211 KB; BaseEvent: 183 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; BatchSerializer::EventsQueueTag: 49 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7723 KB; 2026-04-02 15:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 1390 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; BaseEvent: 263 KB; TcpIpConnectionsManager: 240 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; BatchSerializer::EventsQueueTag: 71 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7769 KB; 2026-04-02 15:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 1449 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; BaseEvent: 289 KB; TcpIpConnectionsManager: 230 KB; ModuleInfoCache: 128 KB; rules::ProcessConditionsCache: 119 KB; CacheEntry: 113 KB; BatchSerializer::EventsQueueTag: 78 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7914 KB; 2026-04-02 15:58:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 15:51:01, To:, 2026-04-02 15:58:07, Duration (s):, 426, Events Per Second:, 3.872, Events:, 1650, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1378, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 271, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 185834 2026-04-02 15:58:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s347ms. 2026-04-02 15:58:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:58:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 15:58:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:58:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 15:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 634 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; TcpIpConnectionsManager: 188 KB; ModuleInfoCache: 128 KB; rules::ProcessConditionsCache: 122 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6698 KB; 2026-04-02 15:59:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 15:59:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 15:59:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 15:59:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 16:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 656 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 174 KB; TcpIpConnectionsManager: 142 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 6743 KB; 2026-04-02 16:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 671 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 135 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 112 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6686 KB; 2026-04-02 16:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 671 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 135 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6668 KB; 2026-04-02 16:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 671 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 135 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6666 KB; 2026-04-02 16:03:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:03:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 16:03:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:03:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 671 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; rules::ProcessConditionsCache: 137 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6646 KB; 2026-04-02 16:04:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 16:04:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 16:04:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 16:04:14 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 16:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 671 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 137 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 55 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6650 KB; 2026-04-02 16:05:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 15:58:06, To:, 2026-04-02 16:05:07, Duration (s):, 421, Events Per Second:, 0.411, Events:, 173, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 172, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22434 2026-04-02 16:05:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s904ms. 2026-04-02 16:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 271 KB; rules::ProcessConditionsCache: 200 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6330 KB; 2026-04-02 16:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 141 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6255 KB; 2026-04-02 16:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 141 KB; ModuleInfoCache: 128 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6374 KB; 2026-04-02 16:08:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:08:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 16:08:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:08:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 345 KB; rules::ProcessConditionsCache: 192 KB; TcpIpConnectionsManager: 161 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6522 KB; 2026-04-02 16:09:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 16:09:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 16:09:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 16:09:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 16:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 427 KB; rules::ProcessConditionsCache: 179 KB; TcpIpConnectionsManager: 163 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6590 KB; 2026-04-02 16:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 434 KB; rules::ProcessConditionsCache: 152 KB; TcpIpConnectionsManager: 140 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6557 KB; 2026-04-02 16:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 437 KB; rules::ProcessConditionsCache: 152 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 107 KB; cloudutils::CloudData: 48 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6535 KB; 2026-04-02 16:12:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 16:04:52, To:, 2026-04-02 16:12:07, Duration (s):, 435, Events Per Second:, 1.200, Events:, 522, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 521, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 62415 2026-04-02 16:12:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s770ms. 2026-04-02 16:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 76 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6282 KB; 2026-04-02 16:13:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:13:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 16:13:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:13:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6273 KB; 2026-04-02 16:14:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 16:14:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 16:14:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 16:14:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 16:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6276 KB; 2026-04-02 16:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 156 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6287 KB; 2026-04-02 16:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 308 KB; rules::ProcessConditionsCache: 156 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6307 KB; 2026-04-02 16:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 158 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6321 KB; 2026-04-02 16:18:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:18:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 16:18:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:18:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 346 KB; rules::ProcessConditionsCache: 226 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6471 KB; 2026-04-02 16:19:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 16:12:04, To:, 2026-04-02 16:19:07, Duration (s):, 423, Events Per Second:, 0.279, Events:, 118, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 117, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17568 2026-04-02 16:19:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s706ms. 2026-04-02 16:19:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 16:19:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 16:19:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 16:19:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 16:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 128 KB; TcpIpConnectionsManager: 120 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6419 KB; 2026-04-02 16:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 207 KB; TcpIpConnectionsManager: 138 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6482 KB; 2026-04-02 16:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 168 KB; TcpIpConnectionsManager: 143 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6445 KB; 2026-04-02 16:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 104 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6413 KB; 2026-04-02 16:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 16:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6400 KB; 2026-04-02 16:24:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 16:24:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 16:24:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 16:24:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 16:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 345 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6380 KB; 2026-04-02 16:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 170 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6392 KB; 2026-04-02 16:26:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 16:19:01, To:, 2026-04-02 16:26:07, Duration (s):, 426, Events Per Second:, 0.448, Events:, 191, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 190, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27006 2026-04-02 16:26:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s710ms. 2026-04-02 16:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 248 KB; rules::ProcessConditionsCache: 171 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6253 KB; 2026-04-02 16:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 188 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6296 KB; 2026-04-02 16:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 16:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 171 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6251 KB; 2026-04-02 16:29:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 16:29:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 16:29:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 16:29:15 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 16:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 286 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6376 KB; 2026-04-02 16:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 293 KB; rules::ProcessConditionsCache: 179 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6331 KB; 2026-04-02 16:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 182 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 101 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6363 KB; 2026-04-02 16:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 308 KB; rules::ProcessConditionsCache: 182 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6361 KB; 2026-04-02 16:33:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 16:27:44, To:, 2026-04-02 16:33:07, Duration (s):, 323, Events Per Second:, 0.498, Events:, 161, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 160, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20750 2026-04-02 16:33:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s712ms. 2026-04-02 16:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 16:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 277 KB; rules::ProcessConditionsCache: 179 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6287 KB; 2026-04-02 16:34:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 16:34:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 16:34:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 16:34:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 16:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 214 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6365 KB; 2026-04-02 16:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6344 KB; 2026-04-02 16:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 339 KB; rules::ProcessConditionsCache: 190 KB; ModuleInfoCache: 128 KB; TcpIpConnectionsManager: 120 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6421 KB; 2026-04-02 16:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 188 KB; TcpIpConnectionsManager: 142 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6467 KB; 2026-04-02 16:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 16:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 384 KB; rules::ProcessConditionsCache: 221 KB; TcpIpConnectionsManager: 145 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6540 KB; 2026-04-02 16:39:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 16:39:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 16:39:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 16:39:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 16:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 439 KB; rules::ProcessConditionsCache: 193 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 112 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6565 KB; 2026-04-02 16:40:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 16:33:12, To:, 2026-04-02 16:40:07, Duration (s):, 415, Events Per Second:, 1.053, Events:, 437, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 436, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52563 2026-04-02 16:40:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s846ms. 2026-04-02 16:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 374 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 112 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6505 KB; 2026-04-02 16:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 374 KB; rules::ProcessConditionsCache: 199 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 104 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6451 KB; 2026-04-02 16:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 398 KB; rules::ProcessConditionsCache: 199 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 112 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6490 KB; 2026-04-02 16:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 16:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 403 KB; rules::ProcessConditionsCache: 199 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 107 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6503 KB; 2026-04-02 16:44:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 16:44:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 16:44:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 16:44:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 16:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 425 KB; rules::ProcessConditionsCache: 199 KB; ModuleInfoCache: 128 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6542 KB; 2026-04-02 16:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 428 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6549 KB; 2026-04-02 16:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 428 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6535 KB; 2026-04-02 16:47:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 16:40:14, To:, 2026-04-02 16:47:07, Duration (s):, 413, Events Per Second:, 0.569, Events:, 235, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 234, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28557 2026-04-02 16:47:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s915ms. 2026-04-02 16:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6300 KB; 2026-04-02 16:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:48:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 16:48:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:48:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 270 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6306 KB; 2026-04-02 16:49:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 16:49:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 16:49:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 16:49:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 16:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 270 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6312 KB; 2026-04-02 16:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 274 KB; rules::ProcessConditionsCache: 208 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6327 KB; 2026-04-02 16:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6378 KB; 2026-04-02 16:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 94 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6401 KB; 2026-04-02 16:53:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:53:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 16:53:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:53:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 334 KB; rules::ProcessConditionsCache: 234 KB; ModuleInfoCache: 128 KB; TcpIpConnectionsManager: 122 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6474 KB; 2026-04-02 16:54:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 16:48:36, To:, 2026-04-02 16:54:07, Duration (s):, 331, Events Per Second:, 0.516, Events:, 171, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 170, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21893 2026-04-02 16:54:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s097ms. 2026-04-02 16:54:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 16:54:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 16:54:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 16:54:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 16:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 326 KB; rules::ProcessConditionsCache: 208 KB; ModuleInfoCache: 128 KB; TcpIpConnectionsManager: 125 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6425 KB; 2026-04-02 16:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 128 KB; TcpIpConnectionsManager: 114 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6422 KB; 2026-04-02 16:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 208 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 94 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6392 KB; 2026-04-02 16:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 351 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6416 KB; 2026-04-02 16:58:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:58:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 16:58:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:58:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 16:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 356 KB; rules::ProcessConditionsCache: 219 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6439 KB; 2026-04-02 16:59:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 16:59:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 16:59:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 16:59:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 17:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6440 KB; 2026-04-02 17:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 424 KB; rules::ProcessConditionsCache: 282 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6622 KB; 2026-04-02 17:01:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 16:54:01, To:, 2026-04-02 17:01:07, Duration (s):, 426, Events Per Second:, 0.934, Events:, 398, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 364, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 33, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49154 2026-04-02 17:01:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s862ms. 2026-04-02 17:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 631 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; TcpIpConnectionsManager: 222 KB; rules::ProcessConditionsCache: 221 KB; BaseEvent: 137 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7011 KB; 2026-04-02 17:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 680 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; rules::ProcessConditionsCache: 269 KB; TcpIpConnectionsManager: 235 KB; BaseEvent: 161 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 48 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7158 KB; 2026-04-02 17:03:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:03:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 17:03:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:03:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 680 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 269 KB; TcpIpConnectionsManager: 212 KB; BaseEvent: 161 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 48 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7134 KB; 2026-04-02 17:04:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 17:04:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 17:04:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 17:04:16 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 17:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 681 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; rules::ProcessConditionsCache: 271 KB; BaseEvent: 162 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 48 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7010 KB; 2026-04-02 17:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 685 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; rules::ProcessConditionsCache: 274 KB; BaseEvent: 166 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 48 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7002 KB; 2026-04-02 17:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 685 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; rules::ProcessConditionsCache: 274 KB; BaseEvent: 167 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 48 KB; BatchSerializer::EventsQueueTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6993 KB; 2026-04-02 17:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; ProcessInfo: 685 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 274 KB; BaseEvent: 167 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 48 KB; BatchSerializer::EventsQueueTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6996 KB; 2026-04-02 17:08:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 17:01:02, To:, 2026-04-02 17:08:07, Duration (s):, 425, Events Per Second:, 2.227, Events:, 947, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 787, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 159, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 107462 2026-04-02 17:08:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s080ms. 2026-04-02 17:08:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:08:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 17:08:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:08:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 273 KB; ProcessInfo: 246 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6343 KB; 2026-04-02 17:09:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 17:09:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 17:09:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 17:09:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 17:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 281 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6417 KB; 2026-04-02 17:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 293 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6435 KB; 2026-04-02 17:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6471 KB; 2026-04-02 17:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6474 KB; 2026-04-02 17:13:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:13:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 17:13:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:13:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 94 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6506 KB; 2026-04-02 17:14:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 17:14:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 17:14:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 17:14:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 17:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6485 KB; 2026-04-02 17:15:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 17:08:27, To:, 2026-04-02 17:15:07, Duration (s):, 400, Events Per Second:, 0.577, Events:, 231, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 230, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28947 2026-04-02 17:15:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s771ms. 2026-04-02 17:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; rules::ProcessConditionsCache: 291 KB; ProcessInfo: 257 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6387 KB; 2026-04-02 17:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; rules::ProcessConditionsCache: 294 KB; ProcessInfo: 258 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6369 KB; 2026-04-02 17:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; rules::ProcessConditionsCache: 327 KB; ProcessInfo: 293 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6478 KB; 2026-04-02 17:18:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:18:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 17:18:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:18:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 296 KB; ProcessInfo: 293 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6446 KB; 2026-04-02 17:19:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 17:19:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 17:19:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 17:19:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 17:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 302 KB; ProcessInfo: 299 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 94 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6464 KB; 2026-04-02 17:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 302 KB; ProcessInfo: 299 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6465 KB; 2026-04-02 17:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 302 KB; ProcessInfo: 299 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6454 KB; 2026-04-02 17:22:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 17:16:11, To:, 2026-04-02 17:22:07, Duration (s):, 356, Events Per Second:, 0.317, Events:, 113, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 112, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15246 2026-04-02 17:22:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s735ms. 2026-04-02 17:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 305 KB; ProcessInfo: 249 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6394 KB; 2026-04-02 17:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 17:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; rules::ProcessConditionsCache: 302 KB; ProcessInfo: 255 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6384 KB; 2026-04-02 17:24:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 17:24:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 17:24:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 17:24:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 17:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; rules::ProcessConditionsCache: 302 KB; ProcessInfo: 265 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6410 KB; 2026-04-02 17:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 305 KB; ProcessInfo: 267 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6419 KB; 2026-04-02 17:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; rules::ProcessConditionsCache: 307 KB; ProcessInfo: 268 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6412 KB; 2026-04-02 17:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; rules::ProcessConditionsCache: 309 KB; ProcessInfo: 292 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6452 KB; 2026-04-02 17:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 17:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 360 KB; ProcessInfo: 314 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6564 KB; 2026-04-02 17:29:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 17:22:19, To:, 2026-04-02 17:29:07, Duration (s):, 408, Events Per Second:, 0.412, Events:, 168, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 167, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22398 2026-04-02 17:29:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s993ms. 2026-04-02 17:29:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 17:29:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 17:29:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 17:29:17 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 17:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 306 KB; ProcessInfo: 287 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 109 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6456 KB; 2026-04-02 17:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 360 KB; ProcessInfo: 343 KB; TcpIpConnectionsManager: 137 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6622 KB; 2026-04-02 17:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 351 KB; rules::ProcessConditionsCache: 330 KB; TcpIpConnectionsManager: 135 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6601 KB; 2026-04-02 17:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 381 KB; rules::ProcessConditionsCache: 334 KB; TcpIpConnectionsManager: 148 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6655 KB; 2026-04-02 17:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 17:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 381 KB; rules::ProcessConditionsCache: 314 KB; ModuleInfoCache: 128 KB; TcpIpConnectionsManager: 114 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6622 KB; 2026-04-02 17:34:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 17:34:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 17:34:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 17:34:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 17:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 395 KB; rules::ProcessConditionsCache: 325 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 111 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6653 KB; 2026-04-02 17:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 409 KB; rules::ProcessConditionsCache: 321 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6650 KB; 2026-04-02 17:36:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 17:29:01, To:, 2026-04-02 17:36:07, Duration (s):, 426, Events Per Second:, 0.786, Events:, 335, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 334, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41744 2026-04-02 17:36:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s367ms. 2026-04-02 17:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 280 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6453 KB; 2026-04-02 17:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 280 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6450 KB; 2026-04-02 17:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 17:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 335 KB; ProcessInfo: 286 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6537 KB; 2026-04-02 17:39:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 17:39:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 17:39:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 17:39:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 17:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 328 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6596 KB; 2026-04-02 17:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 335 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6633 KB; 2026-04-02 17:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 340 KB; rules::ProcessConditionsCache: 335 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6601 KB; 2026-04-02 17:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 368 KB; rules::ProcessConditionsCache: 356 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6645 KB; 2026-04-02 17:43:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 17:36:03, To:, 2026-04-02 17:43:07, Duration (s):, 424, Events Per Second:, 0.603, Events:, 256, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 255, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33094 2026-04-02 17:43:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s281ms. 2026-04-02 17:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 17:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; rules::ProcessConditionsCache: 332 KB; ProcessInfo: 274 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 94 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6502 KB; 2026-04-02 17:44:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 17:44:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 17:44:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 17:44:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 17:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 337 KB; ProcessInfo: 280 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6537 KB; 2026-04-02 17:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 337 KB; ProcessInfo: 283 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6549 KB; 2026-04-02 17:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 337 KB; ProcessInfo: 287 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6560 KB; 2026-04-02 17:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 334 KB; ProcessInfo: 287 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6560 KB; 2026-04-02 17:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:48:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 17:48:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:48:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 337 KB; ProcessInfo: 292 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6553 KB; 2026-04-02 17:49:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 17:49:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 17:49:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 17:49:18 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 17:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; rules::ProcessConditionsCache: 337 KB; ProcessInfo: 298 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 6525 KB; 2026-04-02 17:50:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 17:43:02, To:, 2026-04-02 17:50:07, Duration (s):, 425, Events Per Second:, 0.162, Events:, 69, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 68, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10345 2026-04-02 17:50:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s696ms. 2026-04-02 17:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 346 KB; ProcessInfo: 282 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6505 KB; 2026-04-02 17:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 343 KB; ProcessInfo: 282 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 91 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6527 KB; 2026-04-02 17:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 341 KB; ProcessInfo: 283 KB; ModuleInfoCache: 128 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6508 KB; 2026-04-02 17:53:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:53:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 17:53:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:53:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 341 KB; ProcessInfo: 284 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6503 KB; 2026-04-02 17:54:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 17:54:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 17:54:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 17:54:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 17:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::ProcessConditionsCache: 341 KB; ProcessInfo: 284 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6507 KB; 2026-04-02 17:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::ProcessConditionsCache: 343 KB; ProcessInfo: 287 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6515 KB; 2026-04-02 17:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::ProcessConditionsCache: 346 KB; ProcessInfo: 289 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6529 KB; 2026-04-02 17:57:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 17:50:04, To:, 2026-04-02 17:57:07, Duration (s):, 423, Events Per Second:, 0.224, Events:, 95, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 92, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13638 2026-04-02 17:57:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s699ms. 2026-04-02 17:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::ProcessConditionsCache: 346 KB; ProcessInfo: 248 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 74 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6483 KB; 2026-04-02 17:58:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:58:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 17:58:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:58:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 17:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 293 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 111 KB; rules::ProcessConditionsCache: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6305 KB; 2026-04-02 17:59:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 17:59:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 17:59:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 17:59:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 18:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 299 KB; ModuleInfoCache: 129 KB; TcpIpConnectionsManager: 117 KB; CacheEntry: 114 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6230 KB; 2026-04-02 18:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 355 KB; ModuleInfoCache: 129 KB; TcpIpConnectionsManager: 117 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6344 KB; 2026-04-02 18:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 355 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 48 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6323 KB; 2026-04-02 18:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 355 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 69 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 48 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6310 KB; 2026-04-02 18:03:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:03:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 18:03:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:03:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 356 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 48 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6318 KB; 2026-04-02 18:04:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 17:56:58, To:, 2026-04-02 18:04:07, Duration (s):, 429, Events Per Second:, 0.673, Events:, 289, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 288, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35017 2026-04-02 18:04:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s733ms. 2026-04-02 18:04:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 18:04:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 18:04:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 18:04:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 18:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 280 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 94 KB; rules::ProcessConditionsCache: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6247 KB; 2026-04-02 18:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 283 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 97 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6239 KB; 2026-04-02 18:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 283 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 96 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6231 KB; 2026-04-02 18:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 284 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 71 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6216 KB; 2026-04-02 18:08:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:08:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 18:08:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:08:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 312 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 100 KB; TcpIpConnectionsManager: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6300 KB; 2026-04-02 18:09:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 18:09:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 18:09:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 18:09:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 18:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 364 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 102 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 48 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6381 KB; 2026-04-02 18:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 392 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 115 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 48 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6452 KB; 2026-04-02 18:11:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 18:04:08, To:, 2026-04-02 18:11:07, Duration (s):, 419, Events Per Second:, 0.935, Events:, 392, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 379, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48400 2026-04-02 18:11:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s916ms. 2026-04-02 18:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 352 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 113 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6384 KB; 2026-04-02 18:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 376 KB; rules::ProcessConditionsCache: 150 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 104 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6464 KB; 2026-04-02 18:13:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:13:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 18:13:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:13:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 376 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 110 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6404 KB; 2026-04-02 18:14:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 18:14:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 18:14:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 18:14:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 18:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 377 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 117 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6418 KB; 2026-04-02 18:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 424 KB; rules::ProcessConditionsCache: 135 KB; TcpIpConnectionsManager: 132 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6495 KB; 2026-04-02 18:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 452 KB; rules::ProcessConditionsCache: 163 KB; TcpIpConnectionsManager: 140 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6559 KB; 2026-04-02 18:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 455 KB; TcpIpConnectionsManager: 140 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6513 KB; 2026-04-02 18:18:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 18:11:12, To:, 2026-04-02 18:18:07, Duration (s):, 415, Events Per Second:, 0.682, Events:, 283, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 282, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33792 2026-04-02 18:18:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s721ms. 2026-04-02 18:18:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:18:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 18:18:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:18:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 334 KB; ModuleInfoCache: 129 KB; TcpIpConnectionsManager: 116 KB; rules::ProcessConditionsCache: 115 KB; CacheEntry: 114 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6333 KB; 2026-04-02 18:19:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 18:19:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 18:19:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 18:19:19 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 18:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 337 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 115 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 99 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6327 KB; 2026-04-02 18:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 365 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 104 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6413 KB; 2026-04-02 18:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 365 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 122 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6363 KB; 2026-04-02 18:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 723 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ProcessInfo: 367 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 126 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6380 KB; 2026-04-02 18:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 18:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 370 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 122 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6375 KB; 2026-04-02 18:24:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 18:24:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 18:24:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 18:24:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 18:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 370 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 122 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6370 KB; 2026-04-02 18:25:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 18:18:05, To:, 2026-04-02 18:25:07, Duration (s):, 422, Events Per Second:, 0.336, Events:, 142, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 141, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19192 2026-04-02 18:25:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s821ms. 2026-04-02 18:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 252 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 119 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6220 KB; 2026-04-02 18:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 259 KB; rules::ProcessConditionsCache: 139 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6248 KB; 2026-04-02 18:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 259 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 119 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6260 KB; 2026-04-02 18:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 18:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 259 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 119 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6260 KB; 2026-04-02 18:29:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 18:29:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 18:29:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 18:29:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 18:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 259 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 119 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6265 KB; 2026-04-02 18:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 267 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 128 KB; CacheEntry: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6284 KB; 2026-04-02 18:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 141 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6322 KB; 2026-04-02 18:32:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 18:25:19, To:, 2026-04-02 18:32:07, Duration (s):, 408, Events Per Second:, 0.176, Events:, 72, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 71, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10734 2026-04-02 18:32:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s651ms. 2026-04-02 18:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 283 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 128 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 94 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; Total: 6275 KB; 2026-04-02 18:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 18:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 283 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 126 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 94 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6278 KB; 2026-04-02 18:34:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 18:34:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 18:34:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 18:34:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 18:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 286 KB; ModuleInfoCache: 129 KB; rules::ProcessConditionsCache: 128 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6276 KB; 2026-04-02 18:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 139 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6280 KB; 2026-04-02 18:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 135 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6262 KB; 2026-04-02 18:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 139 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6283 KB; 2026-04-02 18:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 18:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 135 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6301 KB; 2026-04-02 18:39:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 18:32:04, To:, 2026-04-02 18:39:07, Duration (s):, 423, Events Per Second:, 0.503, Events:, 213, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 212, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27587 2026-04-02 18:39:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s734ms. 2026-04-02 18:39:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 18:39:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 18:39:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 18:39:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 18:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 137 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6297 KB; 2026-04-02 18:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 455 KB; rules::ProcessConditionsCache: 302 KB; TcpIpConnectionsManager: 134 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6772 KB; 2026-04-02 18:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 776 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; TcpIpConnectionsManager: 268 KB; rules::ProcessConditionsCache: 247 KB; BaseEvent: 227 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; BatchSerializer::EventsQueueTag: 59 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7380 KB; 2026-04-02 18:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 963 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; TcpIpConnectionsManager: 334 KB; BaseEvent: 318 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; BatchSerializer::EventsQueueTag: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 50 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7548 KB; 2026-04-02 18:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 18:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 963 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; BaseEvent: 319 KB; TcpIpConnectionsManager: 273 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; BatchSerializer::EventsQueueTag: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; rules::ProcessConditionsCache: 52 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7505 KB; 2026-04-02 18:44:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 18:44:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 18:44:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 18:44:20 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 18:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 969 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; BaseEvent: 321 KB; TcpIpConnectionsManager: 148 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; BatchSerializer::EventsQueueTag: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; rules::ProcessConditionsCache: 52 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7379 KB; 2026-04-02 18:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 975 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; BaseEvent: 323 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; BatchSerializer::EventsQueueTag: 87 KB; TcpIpConnectionsManager: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; rules::ProcessConditionsCache: 52 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7328 KB; 2026-04-02 18:46:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 18:39:09, To:, 2026-04-02 18:46:07, Duration (s):, 418, Events Per Second:, 4.406, Events:, 1843, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1530, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 308, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 206143 2026-04-02 18:46:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s013ms. 2026-04-02 18:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 258 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; rules::ProcessConditionsCache: 55 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6190 KB; 2026-04-02 18:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 259 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 50 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6150 KB; 2026-04-02 18:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:48:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 18:48:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:48:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 262 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::ProcessConditionsCache: 53 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6158 KB; 2026-04-02 18:49:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 18:49:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 18:49:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 18:49:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 18:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 268 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 66 KB; rules::ProcessConditionsCache: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6191 KB; 2026-04-02 18:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 273 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 75 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6243 KB; 2026-04-02 18:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 301 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 93 KB; rules::ProcessConditionsCache: 64 KB; cloudutils::CloudData: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6271 KB; 2026-04-02 18:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 324 KB; ModuleInfoCache: 129 KB; TcpIpConnectionsManager: 117 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 66 KB; cloudutils::CloudData: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6325 KB; 2026-04-02 18:53:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 18:46:35, To:, 2026-04-02 18:53:07, Duration (s):, 392, Events Per Second:, 0.497, Events:, 195, File:, 3, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 186, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 5, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24962 2026-04-02 18:53:07 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s675ms. 2026-04-02 18:53:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:53:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 18:53:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:53:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 315 KB; TcpIpConnectionsManager: 135 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 65 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6285 KB; 2026-04-02 18:54:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 18:54:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 18:54:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 18:54:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 18:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 317 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 102 KB; rules::ProcessConditionsCache: 69 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6272 KB; 2026-04-02 18:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 355 KB; ModuleInfoCache: 129 KB; TcpIpConnectionsManager: 117 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 109 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6377 KB; 2026-04-02 18:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 358 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 99 KB; rules::ProcessConditionsCache: 76 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6320 KB; 2026-04-02 18:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 358 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 99 KB; rules::ProcessConditionsCache: 76 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6320 KB; 2026-04-02 18:58:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:58:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 170, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 18:58:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:58:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 18:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 358 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6301 KB; 2026-04-02 18:59:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 18:59:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 18:59:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 18:59:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 19:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 358 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6288 KB; 2026-04-02 19:00:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 18:53:02, To:, 2026-04-02 19:00:07, Duration (s):, 425, Events Per Second:, 0.607, Events:, 258, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 151, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 53, Livegrid:, 53, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28544 2026-04-02 19:00:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s408ms. 2026-04-02 19:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 246 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6141 KB; 2026-04-02 19:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 185 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6478 KB; 2026-04-02 19:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6482 KB; 2026-04-02 19:03:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:03:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 19:03:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:true, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:03:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 400 KB; rules::ProcessConditionsCache: 194 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6513 KB; 2026-04-02 19:04:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 19:04:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 19:04:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 19:04:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 19:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 400 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6542 KB; 2026-04-02 19:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 405 KB; rules::ProcessConditionsCache: 190 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6540 KB; 2026-04-02 19:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 405 KB; rules::ProcessConditionsCache: 190 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6521 KB; 2026-04-02 19:07:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 18:56:27, To:, 2026-04-02 19:07:07, Duration (s):, 640, Events Per Second:, 0.643, Events:, 412, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 409, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51583 2026-04-02 19:07:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s561ms. 2026-04-02 19:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 274 KB; rules::ProcessConditionsCache: 193 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6339 KB; 2026-04-02 19:08:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:08:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 19:08:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:08:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 276 KB; rules::ProcessConditionsCache: 190 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6341 KB; 2026-04-02 19:09:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 19:09:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 19:09:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 19:09:21 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 19:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 195 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 84 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6484 KB; 2026-04-02 19:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; BaseEvent: 68 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6458 KB; 2026-04-02 19:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 336 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 71 KB; BaseEvent: 71 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6487 KB; 2026-04-02 19:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 348 KB; rules::ProcessConditionsCache: 217 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 84 KB; BaseEvent: 74 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6527 KB; 2026-04-02 19:13:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:13:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 19:13:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:13:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 206 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 83 KB; BaseEvent: 73 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6516 KB; 2026-04-02 19:14:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 19:07:01, To:, 2026-04-02 19:14:07, Duration (s):, 426, Events Per Second:, 1.004, Events:, 428, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 247, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 90, Livegrid:, 90, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47646 2026-04-02 19:14:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s851ms. 2026-04-02 19:14:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 19:14:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 19:14:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 19:14:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 19:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 274 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6335 KB; 2026-04-02 19:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 244 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 91 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6425 KB; 2026-04-02 19:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 207 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6369 KB; 2026-04-02 19:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 233 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6466 KB; 2026-04-02 19:18:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:18:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 19:18:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:18:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 233 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 49 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6465 KB; 2026-04-02 19:19:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 19:19:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 19:19:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 19:19:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 19:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 238 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6457 KB; 2026-04-02 19:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 381 KB; rules::ProcessConditionsCache: 321 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 49 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 6650 KB; 2026-04-02 19:21:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 19:13:56, To:, 2026-04-02 19:21:07, Duration (s):, 431, Events Per Second:, 0.740, Events:, 319, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 255, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39160 2026-04-02 19:21:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s652ms. 2026-04-02 19:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 239 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 111 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6419 KB; 2026-04-02 19:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 726 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 239 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6441 KB; 2026-04-02 19:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 19:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 101 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6433 KB; 2026-04-02 19:24:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 19:24:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 19:24:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 19:24:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 19:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 334 KB; rules::ProcessConditionsCache: 283 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6507 KB; 2026-04-02 19:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 348 KB; rules::ProcessConditionsCache: 261 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 104 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6525 KB; 2026-04-02 19:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 376 KB; rules::ProcessConditionsCache: 250 KB; ModuleInfoCache: 129 KB; TcpIpConnectionsManager: 129 KB; CacheEntry: 114 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6541 KB; 2026-04-02 19:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 376 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 129 KB; TcpIpConnectionsManager: 119 KB; CacheEntry: 114 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6527 KB; 2026-04-02 19:28:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 19:21:02, To:, 2026-04-02 19:28:07, Duration (s):, 425, Events Per Second:, 0.564, Events:, 240, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 239, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31873 2026-04-02 19:28:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s824ms. 2026-04-02 19:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 19:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 104 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6406 KB; 2026-04-02 19:29:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 19:29:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 19:29:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 19:29:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 19:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 248 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6390 KB; 2026-04-02 19:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 250 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 63 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6398 KB; 2026-04-02 19:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 250 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6395 KB; 2026-04-02 19:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 279 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6481 KB; 2026-04-02 19:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 19:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 94 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6490 KB; 2026-04-02 19:34:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 19:34:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 19:34:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 19:34:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 19:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 367 KB; rules::ProcessConditionsCache: 254 KB; ModuleInfoCache: 129 KB; TcpIpConnectionsManager: 120 KB; CacheEntry: 114 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6533 KB; 2026-04-02 19:35:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 19:28:01, To:, 2026-04-02 19:35:07, Duration (s):, 426, Events Per Second:, 0.464, Events:, 198, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 195, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24799 2026-04-02 19:35:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s621ms. 2026-04-02 19:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 308 KB; rules::ProcessConditionsCache: 259 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 106 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6444 KB; 2026-04-02 19:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 286 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6472 KB; 2026-04-02 19:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 259 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6426 KB; 2026-04-02 19:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 19:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 257 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6451 KB; 2026-04-02 19:39:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 19:39:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 19:39:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 19:39:22 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 19:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 368 KB; rules::ProcessConditionsCache: 261 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6528 KB; 2026-04-02 19:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 396 KB; rules::ProcessConditionsCache: 270 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6563 KB; 2026-04-02 19:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 396 KB; rules::ProcessConditionsCache: 272 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 49 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6571 KB; 2026-04-02 19:42:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 19:35:46, To:, 2026-04-02 19:42:07, Duration (s):, 381, Events Per Second:, 0.629, Events:, 240, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 239, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31015 2026-04-02 19:42:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s294ms. 2026-04-02 19:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 276 KB; rules::ProcessConditionsCache: 273 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6414 KB; 2026-04-02 19:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 19:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 277 KB; ProcessInfo: 277 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6404 KB; 2026-04-02 19:44:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 19:44:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 19:44:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 19:44:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 19:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 301 KB; rules::ProcessConditionsCache: 284 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6453 KB; 2026-04-02 19:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 315 KB; rules::ProcessConditionsCache: 286 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6488 KB; 2026-04-02 19:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 315 KB; rules::ProcessConditionsCache: 284 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6540 KB; 2026-04-02 19:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 277 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6516 KB; 2026-04-02 19:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:48:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 19:48:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:48:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 279 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6537 KB; 2026-04-02 19:49:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 19:42:09, To:, 2026-04-02 19:49:07, Duration (s):, 418, Events Per Second:, 0.292, Events:, 122, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 113, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16405 2026-04-02 19:49:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s284ms. 2026-04-02 19:49:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 19:49:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 19:49:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 19:49:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 19:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; rules::ProcessConditionsCache: 284 KB; ProcessInfo: 273 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6409 KB; 2026-04-02 19:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; rules::ProcessConditionsCache: 288 KB; ProcessInfo: 279 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6427 KB; 2026-04-02 19:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; rules::ProcessConditionsCache: 337 KB; ProcessInfo: 306 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6561 KB; 2026-04-02 19:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 308 KB; rules::ProcessConditionsCache: 293 KB; ModuleInfoCache: 129 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6498 KB; 2026-04-02 19:53:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:53:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 19:53:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:53:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 297 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6784 KB; 2026-04-02 19:54:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 19:54:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 19:54:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 19:54:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 19:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 348 KB; rules::ProcessConditionsCache: 337 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 120 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6904 KB; 2026-04-02 19:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 310 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 116 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6891 KB; 2026-04-02 19:56:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 19:49:01, To:, 2026-04-02 19:56:07, Duration (s):, 426, Events Per Second:, 0.816, Events:, 348, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 301, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40496 2026-04-02 19:56:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s308ms. 2026-04-02 19:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 301 KB; rules::ProcessConditionsCache: 295 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 116 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6744 KB; 2026-04-02 19:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; ProcessInfo: 587 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; TcpIpConnectionsManager: 212 KB; rules::ProcessConditionsCache: 199 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; BaseEvent: 136 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7212 KB; 2026-04-02 19:58:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:58:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 19:58:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:58:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 19:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; ProcessInfo: 763 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; rules::ProcessConditionsCache: 385 KB; TcpIpConnectionsManager: 266 KB; BaseEvent: 223 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; cloudutils::CloudData: 63 KB; BatchSerializer::EventsQueueTag: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7742 KB; 2026-04-02 19:59:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 19:59:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 19:59:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 19:59:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 20:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; ProcessInfo: 765 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; rules::ProcessConditionsCache: 388 KB; TcpIpConnectionsManager: 263 KB; BaseEvent: 224 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; cloudutils::CloudData: 63 KB; BatchSerializer::EventsQueueTag: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7753 KB; 2026-04-02 20:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; BaseEvent: 235 KB; TcpIpConnectionsManager: 189 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; rules::ProcessConditionsCache: 106 KB; BatchSerializer::EventsQueueTag: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7478 KB; 2026-04-02 20:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; BaseEvent: 240 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 114 KB; BatchSerializer::EventsQueueTag: 68 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7326 KB; 2026-04-02 20:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; BaseEvent: 241 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 112 KB; BatchSerializer::EventsQueueTag: 68 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7329 KB; 2026-04-02 20:03:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 19:56:54, To:, 2026-04-02 20:03:07, Duration (s):, 373, Events Per Second:, 3.782, Events:, 1412, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1197, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 214, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 159645 2026-04-02 20:03:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s934ms. 2026-04-02 20:03:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:03:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 20:03:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:03:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 295 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6474 KB; 2026-04-02 20:04:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 20:04:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 20:04:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 20:04:23 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 20:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 318 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6502 KB; 2026-04-02 20:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 320 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6511 KB; 2026-04-02 20:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 320 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 63 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6505 KB; 2026-04-02 20:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 343 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 86 KB; rules::ProcessConditionsCache: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6571 KB; 2026-04-02 20:08:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:08:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 20:08:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:08:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 345 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6560 KB; 2026-04-02 20:09:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 20:09:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 20:09:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 20:09:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 20:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 390 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 63 KB; rules::ProcessConditionsCache: 46 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6679 KB; 2026-04-02 20:10:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 20:03:57, To:, 2026-04-02 20:10:07, Duration (s):, 370, Events Per Second:, 0.724, Events:, 268, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 267, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33710 2026-04-02 20:10:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s589ms. 2026-04-02 20:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 355 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 109 KB; rules::ProcessConditionsCache: 66 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6615 KB; 2026-04-02 20:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 355 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::ProcessConditionsCache: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6564 KB; 2026-04-02 20:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 367 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 109 KB; cloudutils::CloudData: 63 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6586 KB; 2026-04-02 20:13:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:13:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 20:13:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:13:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 389 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 101 KB; cloudutils::CloudData: 63 KB; rules::ProcessConditionsCache: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6617 KB; 2026-04-02 20:14:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 20:14:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 20:14:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 20:14:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 20:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 412 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 120 KB; cloudutils::CloudData: 63 KB; rules::ProcessConditionsCache: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6663 KB; 2026-04-02 20:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 414 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 109 KB; cloudutils::CloudData: 63 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6699 KB; 2026-04-02 20:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 417 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 63 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6653 KB; 2026-04-02 20:17:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 20:10:04, To:, 2026-04-02 20:17:07, Duration (s):, 423, Events Per Second:, 0.635, Events:, 269, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 268, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32245 2026-04-02 20:17:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s707ms. 2026-04-02 20:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ProcessInfo: 277 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; cloudutils::CloudData: 63 KB; TcpIpConnectionsManager: 60 KB; rules::ProcessConditionsCache: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6441 KB; 2026-04-02 20:18:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:18:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 20:18:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:18:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ProcessInfo: 279 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; cloudutils::CloudData: 63 KB; TcpIpConnectionsManager: 61 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6448 KB; 2026-04-02 20:19:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 20:19:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 20:19:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 20:19:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 20:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 308 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 91 KB; rules::ProcessConditionsCache: 64 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6499 KB; 2026-04-02 20:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 318 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 63 KB; rules::ProcessConditionsCache: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6513 KB; 2026-04-02 20:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 318 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 94 KB; cloudutils::CloudData: 63 KB; rules::ProcessConditionsCache: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6518 KB; 2026-04-02 20:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 364 KB; ModuleInfoCache: 155 KB; CacheEntry: 143 KB; TcpIpConnectionsManager: 120 KB; rules::ProcessConditionsCache: 110 KB; cloudutils::CloudData: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6668 KB; 2026-04-02 20:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 20:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 365 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 109 KB; cloudutils::CloudData: 65 KB; rules::ProcessConditionsCache: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6630 KB; 2026-04-02 20:24:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 20:18:03, To:, 2026-04-02 20:24:07, Duration (s):, 364, Events Per Second:, 0.653, Events:, 238, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 237, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29076 2026-04-02 20:24:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s501ms. 2026-04-02 20:24:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 20:24:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 20:24:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 20:24:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 20:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 293 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 109 KB; cloudutils::CloudData: 65 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6529 KB; 2026-04-02 20:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 298 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 65 KB; rules::ProcessConditionsCache: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6511 KB; 2026-04-02 20:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 481 KB; ProcessInfo: 298 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; cloudutils::CloudData: 65 KB; rules::ProcessConditionsCache: 62 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6482 KB; 2026-04-02 20:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 298 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; cloudutils::CloudData: 65 KB; rules::ProcessConditionsCache: 62 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6484 KB; 2026-04-02 20:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 20:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 298 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; cloudutils::CloudData: 65 KB; rules::ProcessConditionsCache: 62 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6489 KB; 2026-04-02 20:29:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 20:29:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 20:29:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 20:29:24 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 20:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 302 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 69 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6506 KB; 2026-04-02 20:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 351 KB; rules::ProcessConditionsCache: 159 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 109 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6715 KB; 2026-04-02 20:31:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 20:24:54, To:, 2026-04-02 20:31:07, Duration (s):, 373, Events Per Second:, 0.319, Events:, 119, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 118, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17164 2026-04-02 20:31:08 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s639ms. 2026-04-02 20:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 299 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 109 KB; rules::ProcessConditionsCache: 71 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6541 KB; 2026-04-02 20:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 299 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 109 KB; rules::ProcessConditionsCache: 69 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6543 KB; 2026-04-02 20:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 20:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 302 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 93 KB; rules::ProcessConditionsCache: 73 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6539 KB; 2026-04-02 20:34:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 20:34:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 20:34:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 20:34:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 20:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 308 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 79 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6527 KB; 2026-04-02 20:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 314 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 79 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6537 KB; 2026-04-02 20:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 314 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 77 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6527 KB; 2026-04-02 20:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 359 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 115 KB; TcpIpConnectionsManager: 111 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6663 KB; 2026-04-02 20:38:07 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 20:31:02, To:, 2026-04-02 20:38:07, Duration (s):, 425, Events Per Second:, 0.444, Events:, 189, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 188, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27083 2026-04-02 20:38:09 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s872ms. 2026-04-02 20:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 20:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 320 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 125 KB; rules::ProcessConditionsCache: 115 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6619 KB; 2026-04-02 20:39:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 20:39:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 20:39:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 20:39:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 20:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 393 KB; ModuleInfoCache: 157 KB; TcpIpConnectionsManager: 147 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 84 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6722 KB; 2026-04-02 20:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 399 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 109 KB; rules::ProcessConditionsCache: 91 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6707 KB; 2026-04-02 20:41:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 20:38:02, To:, 2026-04-02 20:41:42, Duration (s):, 220, Events Per Second:, 1.302, Events:, 287, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 285, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37722 2026-04-02 20:41:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s078ms. 2026-04-02 20:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 373 KB; ModuleInfoCache: 157 KB; rules::ProcessConditionsCache: 155 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 120 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6734 KB; 2026-04-02 20:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 374 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 96 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 6665 KB; 2026-04-02 20:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 20:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 421 KB; rules::ProcessConditionsCache: 193 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 132 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6881 KB; 2026-04-02 20:44:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 20:44:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 20:44:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 20:44:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 20:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 431 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 121 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 6812 KB; 2026-04-02 20:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 434 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 120 KB; rules::ProcessConditionsCache: 96 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; ProcessInfoCommandLineTag: 24 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6766 KB; 2026-04-02 20:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 480 KB; TcpIpConnectionsManager: 161 KB; ModuleInfoCache: 157 KB; rules::ProcessConditionsCache: 156 KB; CacheEntry: 145 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 32 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6921 KB; 2026-04-02 20:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 496 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 135 KB; rules::ProcessConditionsCache: 103 KB; cloudutils::CloudData: 65 KB; BaseEvent: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6884 KB; 2026-04-02 20:48:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 20:41:39, To:, 2026-04-02 20:48:42, Duration (s):, 423, Events Per Second:, 0.975, Events:, 413, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 404, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48173 2026-04-02 20:48:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s008ms. 2026-04-02 20:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:48:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 20:48:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:48:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 309 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 129 KB; rules::ProcessConditionsCache: 100 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6591 KB; 2026-04-02 20:49:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 20:49:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 20:49:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 20:49:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 20:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 314 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 104 KB; rules::ProcessConditionsCache: 98 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 6571 KB; 2026-04-02 20:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 326 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 105 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6572 KB; 2026-04-02 20:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 396 KB; rules::ProcessConditionsCache: 177 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 130 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6799 KB; 2026-04-02 20:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; ProcessInfo: 763 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; TcpIpConnectionsManager: 281 KB; BaseEvent: 204 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 133 KB; cloudutils::CloudData: 65 KB; BatchSerializer::EventsQueueTag: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7501 KB; 2026-04-02 20:53:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:53:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 20:53:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:53:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 1075 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; TcpIpConnectionsManager: 409 KB; BaseEvent: 354 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; BatchSerializer::EventsQueueTag: 96 KB; cloudutils::CloudData: 65 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 8060 KB; 2026-04-02 20:54:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 20:54:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 20:54:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 20:54:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 20:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ProcessInfo: 1097 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; TcpIpConnectionsManager: 391 KB; BaseEvent: 362 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; BatchSerializer::EventsQueueTag: 100 KB; rules::ProcessConditionsCache: 75 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 8086 KB; 2026-04-02 20:55:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 20:48:47, To:, 2026-04-02 20:55:42, Duration (s):, 415, Events Per Second:, 5.337, Events:, 2217, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1890, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 326, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 250320 2026-04-02 20:55:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s145ms. 2026-04-02 20:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; ProcessInfo: 732 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; TcpIpConnectionsManager: 271 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 130 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 7207 KB; 2026-04-02 20:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; TcpIpConnectionsManager: 171 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 130 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7132 KB; 2026-04-02 20:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; TcpIpConnectionsManager: 173 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 130 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7170 KB; 2026-04-02 20:58:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:58:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 20:58:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:58:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 20:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; rules::ProcessConditionsCache: 205 KB; TcpIpConnectionsManager: 193 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 7341 KB; 2026-04-02 20:59:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 20:59:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 20:59:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 20:59:25 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 21:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ModuleInfoCache: 157 KB; TcpIpConnectionsManager: 155 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7171 KB; 2026-04-02 21:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 129 KB; rules::ProcessConditionsCache: 108 KB; cloudutils::CloudData: 65 KB; BaseEvent: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7266 KB; 2026-04-02 21:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; ProcessInfo: 893 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 108 KB; TcpIpConnectionsManager: 106 KB; cloudutils::CloudData: 65 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7247 KB; 2026-04-02 21:02:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 20:55:37, To:, 2026-04-02 21:02:42, Duration (s):, 425, Events Per Second:, 1.124, Events:, 478, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 475, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58980 2026-04-02 21:02:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s436ms. 2026-04-02 21:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 320 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 108 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6557 KB; 2026-04-02 21:03:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:03:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 21:03:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:03:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3619 KB; ModuleMetadata: 948 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 320 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 108 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 6581 KB; 2026-04-02 21:04:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 21:04:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 21:04:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 21:04:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 21:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3620 KB; ModuleMetadata: 950 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 331 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 121 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6621 KB; 2026-04-02 21:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3620 KB; ModuleMetadata: 950 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 331 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 121 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6620 KB; 2026-04-02 21:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3620 KB; ModuleMetadata: 950 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 331 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 121 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6620 KB; 2026-04-02 21:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3620 KB; ModuleMetadata: 950 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 331 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 121 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6615 KB; 2026-04-02 21:08:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:08:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 21:08:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:08:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3620 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 331 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; rules::ProcessConditionsCache: 121 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 6615 KB; 2026-04-02 21:09:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 21:09:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 21:09:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 21:09:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 21:09:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 21:04:29, To:, 2026-04-02 21:09:42, Duration (s):, 313, Events Per Second:, 1.860, Events:, 583, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 509, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 65, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 69660 2026-04-02 21:09:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s871ms. 2026-04-02 21:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 462 KB; rules::ProcessConditionsCache: 263 KB; ModuleInfoCache: 157 KB; TcpIpConnectionsManager: 148 KB; CacheEntry: 145 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10014 KB; 2026-04-02 21:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 462 KB; rules::ProcessConditionsCache: 254 KB; ModuleInfoCache: 157 KB; TcpIpConnectionsManager: 148 KB; CacheEntry: 145 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10009 KB; 2026-04-02 21:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 462 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 157 KB; TcpIpConnectionsManager: 148 KB; CacheEntry: 145 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10030 KB; 2026-04-02 21:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 462 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 9949 KB; 2026-04-02 21:13:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:13:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 21:13:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:13:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 462 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9946 KB; 2026-04-02 21:14:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 21:14:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 21:14:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 21:14:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 21:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 462 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9969 KB; 2026-04-02 21:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 480 KB; rules::ProcessConditionsCache: 259 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 9999 KB; 2026-04-02 21:16:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 21:09:36, To:, 2026-04-02 21:16:42, Duration (s):, 426, Events Per Second:, 0.202, Events:, 86, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 85, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13719 2026-04-02 21:16:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s760ms. 2026-04-02 21:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 260 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9749 KB; 2026-04-02 21:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 262 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9759 KB; 2026-04-02 21:18:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:18:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 21:18:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:18:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 270 KB; rules::ProcessConditionsCache: 262 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 9749 KB; 2026-04-02 21:19:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 21:19:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 21:19:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 21:19:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 21:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 283 KB; rules::ProcessConditionsCache: 264 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 9760 KB; 2026-04-02 21:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 293 KB; rules::ProcessConditionsCache: 267 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 9784 KB; 2026-04-02 21:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 267 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 9800 KB; 2026-04-02 21:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6692 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 267 KB; ModuleInfoCache: 157 KB; CacheEntry: 145 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 9789 KB; 2026-04-02 21:23:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 21:16:43, To:, 2026-04-02 21:23:42, Duration (s):, 419, Events Per Second:, 0.298, Events:, 125, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 124, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17416 2026-04-02 21:23:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s195ms. 2026-04-02 21:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 21:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 343 KB; ProcessInfo: 296 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 111 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 10167 KB; 2026-04-02 21:24:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 21:24:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 21:24:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 21:24:26 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 21:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 339 KB; ProcessInfo: 330 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 143 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 10242 KB; 2026-04-02 21:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 334 KB; rules::ProcessConditionsCache: 269 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 145 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 10165 KB; 2026-04-02 21:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 339 KB; rules::ProcessConditionsCache: 273 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 129 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 10170 KB; 2026-04-02 21:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 304 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 114 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10249 KB; 2026-04-02 21:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 21:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 384 KB; rules::ProcessConditionsCache: 282 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 111 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10220 KB; 2026-04-02 21:29:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 21:29:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 21:29:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 21:29:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 21:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 384 KB; rules::ProcessConditionsCache: 273 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 109 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10203 KB; 2026-04-02 21:30:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 21:23:36, To:, 2026-04-02 21:30:42, Duration (s):, 426, Events Per Second:, 0.828, Events:, 353, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 350, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42744 2026-04-02 21:30:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s828ms. 2026-04-02 21:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; rules::ProcessConditionsCache: 326 KB; ProcessInfo: 326 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 119 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 10172 KB; 2026-04-02 21:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 326 KB; rules::ProcessConditionsCache: 284 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10101 KB; 2026-04-02 21:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 326 KB; rules::ProcessConditionsCache: 284 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10098 KB; 2026-04-02 21:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 21:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 284 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10101 KB; 2026-04-02 21:34:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 21:34:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 21:34:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 21:34:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 21:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 284 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10091 KB; 2026-04-02 21:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 342 KB; rules::ProcessConditionsCache: 291 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 68 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10121 KB; 2026-04-02 21:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 313 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10186 KB; 2026-04-02 21:37:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 21:30:41, To:, 2026-04-02 21:37:42, Duration (s):, 421, Events Per Second:, 0.475, Events:, 200, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 199, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25682 2026-04-02 21:37:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s750ms. 2026-04-02 21:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 293 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 112 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10100 KB; 2026-04-02 21:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 21:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 287 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 120 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 10122 KB; 2026-04-02 21:39:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 21:39:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 21:39:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 21:39:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 21:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 380 KB; rules::ProcessConditionsCache: 302 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 132 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10234 KB; 2026-04-02 21:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 300 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 106 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10230 KB; 2026-04-02 21:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; TcpIpConnectionsManager: 175 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; BaseEvent: 124 KB; rules::ProcessConditionsCache: 111 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10448 KB; 2026-04-02 21:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; rules::ProcessConditionsCache: 361 KB; TcpIpConnectionsManager: 276 KB; BaseEvent: 237 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; BatchSerializer::EventsQueueTag: 70 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 11190 KB; 2026-04-02 21:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 21:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ProcessInfo: 1010 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; TcpIpConnectionsManager: 339 KB; BaseEvent: 317 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; rules::ProcessConditionsCache: 131 KB; BatchSerializer::EventsQueueTag: 91 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 11292 KB; 2026-04-02 21:44:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 21:44:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 21:44:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 21:44:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 21:44:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 21:37:25, To:, 2026-04-02 21:44:42, Duration (s):, 437, Events Per Second:, 4.881, Events:, 2135, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1823, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 311, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 240116 2026-04-02 21:44:45 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s468ms. 2026-04-02 21:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; TcpIpConnectionsManager: 288 KB; rules::ProcessConditionsCache: 206 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10709 KB; 2026-04-02 21:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 209 KB; ModuleInfoCache: 158 KB; TcpIpConnectionsManager: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10588 KB; 2026-04-02 21:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; rules::ProcessConditionsCache: 209 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10521 KB; 2026-04-02 21:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 211 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10523 KB; 2026-04-02 21:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:48:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 21:48:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:48:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; ProcessInfo: 837 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::ProcessConditionsCache: 216 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; Total: 10554 KB; 2026-04-02 21:49:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 21:49:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 21:49:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 21:49:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 21:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; rules::ProcessConditionsCache: 237 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10588 KB; 2026-04-02 21:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; ProcessInfo: 865 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; rules::ProcessConditionsCache: 226 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 99 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10594 KB; 2026-04-02 21:51:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 21:44:55, To:, 2026-04-02 21:51:42, Duration (s):, 407, Events Per Second:, 0.304, Events:, 124, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 123, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16308 2026-04-02 21:51:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s727ms. 2026-04-02 21:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 286 KB; rules::ProcessConditionsCache: 223 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9992 KB; 2026-04-02 21:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 287 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9986 KB; 2026-04-02 21:53:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:53:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 21:53:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:53:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 245 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10063 KB; 2026-04-02 21:54:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 21:54:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 21:54:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 21:54:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 21:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 10085 KB; 2026-04-02 21:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 315 KB; rules::ProcessConditionsCache: 227 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10115 KB; 2026-04-02 21:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 227 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10109 KB; 2026-04-02 21:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 234 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10105 KB; 2026-04-02 21:58:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 21:51:52, To:, 2026-04-02 21:58:42, Duration (s):, 410, Events Per Second:, 0.283, Events:, 116, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 110, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15878 2026-04-02 21:58:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s558ms. 2026-04-02 21:58:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:58:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 21:58:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:58:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 21:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 262 KB; rules::ProcessConditionsCache: 235 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9996 KB; 2026-04-02 21:59:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 21:59:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 21:59:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 21:59:27 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 22:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; rules::ProcessConditionsCache: 327 KB; ProcessInfo: 309 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 125 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 10196 KB; 2026-04-02 22:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 242 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 124 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10100 KB; 2026-04-02 22:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 240 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 119 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10119 KB; 2026-04-02 22:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 242 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10130 KB; 2026-04-02 22:03:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:03:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 22:03:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:03:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 242 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10098 KB; 2026-04-02 22:04:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 22:04:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 22:04:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 22:04:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 22:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ProcessInfo: 353 KB; rules::ProcessConditionsCache: 248 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10132 KB; 2026-04-02 22:05:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 21:58:37, To:, 2026-04-02 22:05:42, Duration (s):, 425, Events Per Second:, 0.700, Events:, 298, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 297, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36960 2026-04-02 22:05:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s691ms. 2026-04-02 22:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 290 KB; rules::ProcessConditionsCache: 264 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 101 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10070 KB; 2026-04-02 22:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 264 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 107 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10069 KB; 2026-04-02 22:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 267 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 10060 KB; 2026-04-02 22:08:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:08:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 22:08:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:08:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 291 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 94 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 10155 KB; 2026-04-02 22:09:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 22:09:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 22:09:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 22:09:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 22:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 384 KB; rules::ProcessConditionsCache: 306 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 10266 KB; 2026-04-02 22:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 267 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 104 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 10218 KB; 2026-04-02 22:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 437 KB; rules::ProcessConditionsCache: 300 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 138 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 10346 KB; 2026-04-02 22:12:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 22:05:46, To:, 2026-04-02 22:12:42, Duration (s):, 416, Events Per Second:, 1.008, Events:, 420, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 419, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51256 2026-04-02 22:12:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s891ms. 2026-04-02 22:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 269 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 135 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10130 KB; 2026-04-02 22:13:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:13:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 22:13:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:13:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 269 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 130 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 10138 KB; 2026-04-02 22:14:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 22:14:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 22:14:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 22:14:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 22:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 262 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 10095 KB; 2026-04-02 22:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 361 KB; rules::ProcessConditionsCache: 267 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10136 KB; 2026-04-02 22:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 271 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10142 KB; 2026-04-02 22:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 377 KB; rules::ProcessConditionsCache: 269 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10169 KB; 2026-04-02 22:18:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:18:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 22:18:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:18:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 400 KB; rules::ProcessConditionsCache: 284 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 10219 KB; 2026-04-02 22:19:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 22:19:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 22:19:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 22:19:28 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 22:19:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 22:12:50, To:, 2026-04-02 22:19:42, Duration (s):, 412, Events Per Second:, 0.526, Events:, 217, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 213, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26899 2026-04-02 22:19:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s002ms. 2026-04-02 22:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 308 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 122 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10144 KB; 2026-04-02 22:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 336 KB; rules::ProcessConditionsCache: 282 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 132 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10151 KB; 2026-04-02 22:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 387 KB; rules::ProcessConditionsCache: 333 KB; TcpIpConnectionsManager: 165 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 10311 KB; 2026-04-02 22:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 409 KB; rules::ProcessConditionsCache: 291 KB; TcpIpConnectionsManager: 183 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10316 KB; 2026-04-02 22:23:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:23:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 22:23:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:23:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 458 KB; rules::ProcessConditionsCache: 398 KB; TcpIpConnectionsManager: 193 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10512 KB; 2026-04-02 22:24:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 22:24:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 22:24:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 22:24:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 22:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 458 KB; rules::ProcessConditionsCache: 276 KB; TcpIpConnectionsManager: 160 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10355 KB; 2026-04-02 22:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 505 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; rules::ProcessConditionsCache: 326 KB; TcpIpConnectionsManager: 165 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; BaseEvent: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10477 KB; 2026-04-02 22:26:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 22:19:42, To:, 2026-04-02 22:26:42, Duration (s):, 420, Events Per Second:, 1.482, Events:, 623, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 622, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 71431 2026-04-02 22:26:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s902ms. 2026-04-02 22:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 352 KB; rules::ProcessConditionsCache: 281 KB; TcpIpConnectionsManager: 165 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10210 KB; 2026-04-02 22:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 353 KB; rules::ProcessConditionsCache: 277 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 122 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 10151 KB; 2026-04-02 22:28:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:28:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 22:28:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:28:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 279 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 10175 KB; 2026-04-02 22:29:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 22:29:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 22:29:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 22:29:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 22:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 279 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 10141 KB; 2026-04-02 22:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 371 KB; rules::ProcessConditionsCache: 286 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10120 KB; 2026-04-02 22:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 373 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10130 KB; 2026-04-02 22:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 373 KB; rules::ProcessConditionsCache: 290 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10137 KB; 2026-04-02 22:33:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 22:26:56, To:, 2026-04-02 22:33:42, Duration (s):, 406, Events Per Second:, 0.138, Events:, 56, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 55, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9108 2026-04-02 22:33:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s698ms. 2026-04-02 22:33:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:33:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 22:33:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:33:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; rules::ProcessConditionsCache: 289 KB; ProcessInfo: 254 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10000 KB; 2026-04-02 22:34:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 22:34:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 22:34:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 22:34:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 22:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; rules::ProcessConditionsCache: 294 KB; ProcessInfo: 261 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10021 KB; 2026-04-02 22:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 294 KB; ProcessInfo: 265 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10029 KB; 2026-04-02 22:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 294 KB; ProcessInfo: 265 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 10036 KB; 2026-04-02 22:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 296 KB; ProcessInfo: 267 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 10038 KB; 2026-04-02 22:38:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:38:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 22:38:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:38:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 329 KB; ProcessInfo: 301 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10126 KB; 2026-04-02 22:39:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 22:39:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 22:39:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 22:39:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 22:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 300 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10139 KB; 2026-04-02 22:40:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 22:34:06, To:, 2026-04-02 22:40:42, Duration (s):, 396, Events Per Second:, 0.555, Events:, 220, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 217, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28533 2026-04-02 22:40:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s746ms. 2026-04-02 22:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 305 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10103 KB; 2026-04-02 22:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 305 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10181 KB; 2026-04-02 22:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 305 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10179 KB; 2026-04-02 22:43:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:43:49 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 22:43:49 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:43:49 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 305 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10203 KB; 2026-04-02 22:44:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 22:44:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 22:44:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 22:44:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 22:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 340 KB; rules::ProcessConditionsCache: 307 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 10136 KB; 2026-04-02 22:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 307 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 10148 KB; 2026-04-02 22:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 345 KB; rules::ProcessConditionsCache: 307 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 10173 KB; 2026-04-02 22:47:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 22:44:00, To:, 2026-04-02 22:47:42, Duration (s):, 222, Events Per Second:, 0.324, Events:, 72, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 71, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10330 2026-04-02 22:47:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s835ms. 2026-04-02 22:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 307 KB; ProcessInfo: 251 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10039 KB; 2026-04-02 22:48:49 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:48:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 22:48:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:48:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 307 KB; ProcessInfo: 251 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10045 KB; 2026-04-02 22:49:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 22:49:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 22:49:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 22:49:29 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 22:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::ProcessConditionsCache: 309 KB; ProcessInfo: 257 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10067 KB; 2026-04-02 22:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 262 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10061 KB; 2026-04-02 22:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 312 KB; ProcessInfo: 262 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 66 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10062 KB; 2026-04-02 22:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::ProcessConditionsCache: 331 KB; ProcessInfo: 286 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 10140 KB; 2026-04-02 22:53:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:53:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 22:53:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:53:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 286 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10107 KB; 2026-04-02 22:54:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 22:54:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 22:54:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 22:54:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 22:54:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 22:49:15, To:, 2026-04-02 22:54:42, Duration (s):, 327, Events Per Second:, 0.424, Events:, 139, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 138, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20269 2026-04-02 22:54:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s848ms. 2026-04-02 22:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6948 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 401 KB; ProcessInfo: 315 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10281 KB; 2026-04-02 22:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 315 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 116 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 10157 KB; 2026-04-02 22:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 324 KB; ProcessInfo: 323 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 109 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10190 KB; 2026-04-02 22:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 324 KB; ProcessInfo: 323 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10173 KB; 2026-04-02 22:58:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:58:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 22:58:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:58:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 22:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 324 KB; ProcessInfo: 323 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10142 KB; 2026-04-02 22:59:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 22:59:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 22:59:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 22:59:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 23:00:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 324 KB; ProcessInfo: 323 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10142 KB; 2026-04-02 23:01:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 324 KB; ProcessInfo: 323 KB; ModuleInfoCache: 158 KB; CacheEntry: 146 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10141 KB; 2026-04-02 23:01:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 22:54:31, To:, 2026-04-02 23:01:42, Duration (s):, 431, Events Per Second:, 1.217, Events:, 525, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 458, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 33, Livegrid:, 33, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 63175 2026-04-02 23:01:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s936ms. 2026-04-02 23:02:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; ProcessInfo: 396 KB; TcpIpConnectionsManager: 184 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; cloudutils::CloudData: 65 KB; rules::ProcessConditionsCache: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10060 KB; 2026-04-02 23:03:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ProcessInfo: 396 KB; TcpIpConnectionsManager: 184 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; cloudutils::CloudData: 65 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 10046 KB; 2026-04-02 23:03:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:03:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 23:03:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:03:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:04:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 396 KB; TcpIpConnectionsManager: 184 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; cloudutils::CloudData: 65 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 10049 KB; 2026-04-02 23:04:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 23:04:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 23:04:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 23:04:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 23:05:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 396 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 61 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9949 KB; 2026-04-02 23:06:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 400 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 56 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 9954 KB; 2026-04-02 23:07:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 430 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; TcpIpConnectionsManager: 91 KB; rules::ProcessConditionsCache: 90 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 10047 KB; 2026-04-02 23:08:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 440 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 65 KB; rules::ProcessConditionsCache: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10054 KB; 2026-04-02 23:08:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 23:01:39, To:, 2026-04-02 23:08:42, Duration (s):, 423, Events Per Second:, 0.340, Events:, 144, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 143, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19127 2026-04-02 23:08:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s901ms. 2026-04-02 23:08:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:08:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 23:08:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:08:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:09:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 290 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 65 KB; rules::ProcessConditionsCache: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9890 KB; 2026-04-02 23:09:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 23:09:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 23:09:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 23:09:30 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 23:10:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 364 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 139 KB; TcpIpConnectionsManager: 107 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 10088 KB; 2026-04-02 23:11:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ProcessInfo: 368 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; TcpIpConnectionsManager: 89 KB; rules::ProcessConditionsCache: 70 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9984 KB; 2026-04-02 23:12:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 380 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; TcpIpConnectionsManager: 102 KB; rules::ProcessConditionsCache: 75 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 9998 KB; 2026-04-02 23:13:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 380 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; TcpIpConnectionsManager: 101 KB; rules::ProcessConditionsCache: 70 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 9999 KB; 2026-04-02 23:13:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:13:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 23:13:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:13:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:14:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 386 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; TcpIpConnectionsManager: 76 KB; rules::ProcessConditionsCache: 70 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 9995 KB; 2026-04-02 23:14:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 23:14:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 23:14:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 23:14:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 23:15:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 396 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; TcpIpConnectionsManager: 78 KB; rules::ProcessConditionsCache: 70 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 10011 KB; 2026-04-02 23:15:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 23:08:55, To:, 2026-04-02 23:15:42, Duration (s):, 407, Events Per Second:, 0.714, Events:, 291, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 290, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35937 2026-04-02 23:15:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s204ms. 2026-04-02 23:16:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 268 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; TcpIpConnectionsManager: 76 KB; rules::ProcessConditionsCache: 73 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9835 KB; 2026-04-02 23:17:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ProcessInfo: 268 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 73 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9834 KB; 2026-04-02 23:18:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 276 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 75 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9839 KB; 2026-04-02 23:18:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:18:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 23:18:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:18:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:19:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 276 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 75 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 9841 KB; 2026-04-02 23:19:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 23:19:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 23:19:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 23:19:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 23:20:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ProcessInfo: 279 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 77 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 9849 KB; 2026-04-02 23:21:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ProcessInfo: 284 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 84 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 9861 KB; 2026-04-02 23:22:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 284 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 86 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 9854 KB; 2026-04-02 23:22:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 23:16:55, To:, 2026-04-02 23:22:42, Duration (s):, 347, Events Per Second:, 0.118, Events:, 41, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 40, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6611 2026-04-02 23:22:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s554ms. 2026-04-02 23:23:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 255 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 84 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9817 KB; 2026-04-02 23:23:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:23:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 23:23:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:23:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:24:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 255 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 86 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9826 KB; 2026-04-02 23:24:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 23:24:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 23:24:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 23:24:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 23:25:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 261 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 91 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9849 KB; 2026-04-02 23:26:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 264 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 88 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9852 KB; 2026-04-02 23:27:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 264 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 88 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9855 KB; 2026-04-02 23:28:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 264 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 88 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9852 KB; 2026-04-02 23:28:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:28:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 23:28:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:28:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:29:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 270 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 93 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9871 KB; 2026-04-02 23:29:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 23:29:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 23:29:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 23:29:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 23:29:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 23:22:56, To:, 2026-04-02 23:29:42, Duration (s):, 406, Events Per Second:, 0.118, Events:, 48, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 47, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7908 2026-04-02 23:29:44 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s469ms. 2026-04-02 23:30:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 270 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 106 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9875 KB; 2026-04-02 23:31:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; ProcessInfo: 283 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 104 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; Total: 9888 KB; 2026-04-02 23:32:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 480 KB; ProcessInfo: 289 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 106 KB; TcpIpConnectionsManager: 90 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 9897 KB; 2026-04-02 23:33:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 298 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 110 KB; TcpIpConnectionsManager: 87 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; Total: 9914 KB; 2026-04-02 23:33:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:33:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 23:33:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:33:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:34:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 304 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 97 KB; TcpIpConnectionsManager: 85 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9901 KB; 2026-04-02 23:34:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 23:34:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 23:34:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 23:34:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 23:35:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 315 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 119 KB; TcpIpConnectionsManager: 92 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 9957 KB; 2026-04-02 23:36:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 336 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 108 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 9980 KB; 2026-04-02 23:36:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 23:29:37, To:, 2026-04-02 23:36:42, Duration (s):, 425, Events Per Second:, 0.515, Events:, 219, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 218, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27824 2026-04-02 23:36:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s685ms. 2026-04-02 23:37:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 293 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 101 KB; TcpIpConnectionsManager: 95 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9894 KB; 2026-04-02 23:38:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 486 KB; ProcessInfo: 299 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 101 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9899 KB; 2026-04-02 23:38:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:38:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 23:38:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:38:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:39:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 305 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 101 KB; TcpIpConnectionsManager: 80 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 9896 KB; 2026-04-02 23:39:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 23:39:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 23:39:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 23:39:31 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 23:40:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 361 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 112 KB; TcpIpConnectionsManager: 82 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 9999 KB; 2026-04-02 23:41:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 367 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 112 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10026 KB; 2026-04-02 23:42:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ProcessInfo: 370 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 114 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 10019 KB; 2026-04-02 23:43:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 396 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 121 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10054 KB; 2026-04-02 23:43:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 23:36:37, To:, 2026-04-02 23:43:42, Duration (s):, 425, Events Per Second:, 0.674, Events:, 287, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 286, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36245 2026-04-02 23:43:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s697ms. 2026-04-02 23:43:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:43:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 23:43:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:43:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:44:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 286 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 117 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9900 KB; 2026-04-02 23:44:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 23:44:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 23:44:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 23:44:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 23:45:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 292 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 112 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9910 KB; 2026-04-02 23:46:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 485 KB; ProcessInfo: 298 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 114 KB; TcpIpConnectionsManager: 77 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 9898 KB; 2026-04-02 23:47:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 298 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 114 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 9898 KB; 2026-04-02 23:48:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 301 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 114 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9893 KB; 2026-04-02 23:48:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:48:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 23:48:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:48:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:49:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 301 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 114 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 5 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 9898 KB; 2026-04-02 23:49:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 23:49:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 23:49:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 23:49:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 23:50:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; ProcessInfo: 302 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 117 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 9905 KB; 2026-04-02 23:50:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 23:43:52, To:, 2026-04-02 23:50:42, Duration (s):, 410, Events Per Second:, 0.168, Events:, 69, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 66, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10259 2026-04-02 23:50:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s688ms. 2026-04-02 23:51:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; ProcessInfo: 257 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 124 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9860 KB; 2026-04-02 23:52:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 481 KB; ProcessInfo: 257 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 122 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9848 KB; 2026-04-02 23:53:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 257 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 122 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9848 KB; 2026-04-02 23:53:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:53:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 23:53:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:53:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:54:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 956 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 482 KB; ProcessInfo: 262 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 124 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9858 KB; 2026-04-02 23:54:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 23:54:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 23:54:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 23:54:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End 2026-04-02 23:55:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 957 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 483 KB; ProcessInfo: 264 KB; ModuleInfoCache: 159 KB; CacheEntry: 147 KB; rules::ProcessConditionsCache: 122 KB; cloudutils::CloudData: 65 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 9858 KB; 2026-04-02 23:56:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 1003 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 484 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 199 KB; ModuleInfoCache: 165 KB; CacheEntry: 154 KB; TcpIpConnectionsManager: 100 KB; cloudutils::CloudData: 68 KB; BaseEvent: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10187 KB; 2026-04-02 23:57:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 1115 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 487 KB; ProcessInfo: 352 KB; rules::ProcessConditionsCache: 212 KB; ModuleInfoCache: 204 KB; CacheEntry: 170 KB; BaseEvent: 115 KB; TcpIpConnectionsManager: 100 KB; cloudutils::CloudData: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10456 KB; 2026-04-02 23:57:42 7ffa1d7fa6c0 Info: Events Statistics, From:, 2026-04-02 23:50:23, To:, 2026-04-02 23:57:42, Duration (s):, 439, Events Per Second:, 2.027, Events:, 891, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 228, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 314, Livegrid:, 314, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 79123 2026-04-02 23:57:43 7ffa1dffb6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s901ms. 2026-04-02 23:58:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 1198 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; ProcessInfo: 345 KB; ModuleInfoCache: 215 KB; rules::ProcessConditionsCache: 214 KB; CacheEntry: 181 KB; TcpIpConnectionsManager: 105 KB; cloudutils::CloudData: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10445 KB; 2026-04-02 23:58:50 7ffa067fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:58:50 7ffa067fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 169, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-04-02 23:58:50 7ffa067fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:58:50 7ffa067fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-04-02 23:59:00 7ffa057fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 6957 KB; ModuleMetadata: 1281 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 489 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 226 KB; ModuleInfoCache: 226 KB; CacheEntry: 193 KB; cloudutils::CloudData: 88 KB; TcpIpConnectionsManager: 75 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10595 KB; 2026-04-02 23:59:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. Start 2026-04-02 23:59:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693 2026-04-02 23:59:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-04-02 23:59:32 7ffa077ff6c0 Info: RulesEngineMemoryUsage. End