| Server IP : 172.67.191.97 / Your IP : 104.23.243.196 Web Server : Apache/2.4.63 (Ubuntu) System : Linux adminpruebas-Virtual-Machine 6.14.0-37-generic #37-Ubuntu SMP PREEMPT_DYNAMIC Fri Nov 14 22:10:32 UTC 2025 x86_64 User : www-data ( 33) PHP Version : 8.4.5 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /var/log/eset/eei/ |
Upload File : |
Version: 2.8.5555 (Oct 13 2025 18:38:28) Compiled with: Clang Version: 18.1.3 Npm: 10.8.2 HardwareInfo: CPU: IntelXeon, cores: 240, RAM: 7GB TelemetryId: Server d38ecbca8f660598256b227c9815089ffeddc553 2026-05-23 00:00:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 00:00:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 00:00:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 00:00:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 00:00:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:00:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 00:00:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:00:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:00:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-22 23:55:01, To:, 2026-05-23 00:00:52, Duration (s):, 351, Events Per Second:, 0.182, Events:, 64, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 57, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 11106 2026-05-23 00:00:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s605ms. 2026-05-23 00:00:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 462 KB; ModuleMetadata: 417 KB; ProcessInfo: 205 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2585 KB; 2026-05-23 00:01:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 462 KB; ModuleMetadata: 417 KB; ProcessInfo: 205 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2585 KB; 2026-05-23 00:02:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 462 KB; ModuleMetadata: 417 KB; ProcessInfo: 205 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2585 KB; 2026-05-23 00:03:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 462 KB; ModuleMetadata: 417 KB; ProcessInfo: 205 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2585 KB; 2026-05-23 00:04:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 462 KB; ModuleMetadata: 417 KB; ProcessInfo: 205 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2585 KB; 2026-05-23 00:05:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 00:05:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 00:05:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 00:05:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 00:05:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:05:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 00:05:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:05:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:05:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 420 KB; ModuleMetadata: 417 KB; rules::ProcessConditionsCache: 219 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; TcpIpConnectionsManager: 58 KB; BaseEvent: 43 KB; cloudutils::CloudData: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2955 KB; 2026-05-23 00:06:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 434 KB; ModuleMetadata: 417 KB; rules::ProcessConditionsCache: 234 KB; ModuleInfoCache: 73 KB; TcpIpConnectionsManager: 73 KB; CacheEntry: 67 KB; BaseEvent: 48 KB; cloudutils::CloudData: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3015 KB; 2026-05-23 00:07:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 00:00:01, To:, 2026-05-23 00:07:52, Duration (s):, 471, Events Per Second:, 1.280, Events:, 604, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 601, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 72956 2026-05-23 00:07:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s748ms. 2026-05-23 00:07:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 425 KB; ModuleMetadata: 418 KB; rules::ProcessConditionsCache: 228 KB; ModuleInfoCache: 73 KB; TcpIpConnectionsManager: 73 KB; CacheEntry: 67 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2927 KB; 2026-05-23 00:08:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 425 KB; ModuleMetadata: 418 KB; rules::ProcessConditionsCache: 228 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; TcpIpConnectionsManager: 33 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2888 KB; 2026-05-23 00:09:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 425 KB; ModuleMetadata: 418 KB; rules::ProcessConditionsCache: 226 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; cloudutils::CloudData: 29 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2876 KB; 2026-05-23 00:10:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 00:10:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 00:10:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 00:10:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 00:10:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:10:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 00:10:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:10:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:10:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 425 KB; ModuleMetadata: 418 KB; rules::ProcessConditionsCache: 226 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2873 KB; 2026-05-23 00:11:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 425 KB; ModuleMetadata: 418 KB; rules::ProcessConditionsCache: 226 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2873 KB; 2026-05-23 00:12:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 499 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 418 KB; rules::ProcessConditionsCache: 239 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; TcpIpConnectionsManager: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; cloudutils::CloudData: 29 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3021 KB; 2026-05-23 00:13:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 499 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 418 KB; rules::ProcessConditionsCache: 239 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; TcpIpConnectionsManager: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; cloudutils::CloudData: 29 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3026 KB; 2026-05-23 00:14:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 00:07:02, To:, 2026-05-23 00:14:52, Duration (s):, 470, Events Per Second:, 0.414, Events:, 195, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 194, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25498 2026-05-23 00:14:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s664ms. 2026-05-23 00:14:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 418 KB; ProcessInfo: 259 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; TcpIpConnectionsManager: 35 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2762 KB; 2026-05-23 00:15:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 00:15:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 00:15:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 00:15:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 00:15:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:15:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 00:15:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:15:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:15:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 418 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2741 KB; 2026-05-23 00:16:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 418 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2749 KB; 2026-05-23 00:17:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 418 KB; rules::ProcessConditionsCache: 298 KB; ProcessInfo: 289 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; TcpIpConnectionsManager: 42 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2868 KB; 2026-05-23 00:18:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 418 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 245 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; TcpIpConnectionsManager: 43 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2781 KB; 2026-05-23 00:19:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 418 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 245 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; TcpIpConnectionsManager: 43 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2787 KB; 2026-05-23 00:20:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 00:20:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 00:20:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 00:20:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 00:20:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:20:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 00:20:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:20:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:20:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 418 KB; ProcessInfo: 293 KB; rules::ProcessConditionsCache: 249 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; TcpIpConnectionsManager: 42 KB; cloudutils::CloudData: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2801 KB; 2026-05-23 00:21:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 00:15:01, To:, 2026-05-23 00:21:52, Duration (s):, 411, Events Per Second:, 0.228, Events:, 94, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 93, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13306 2026-05-23 00:21:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s684ms. 2026-05-23 00:21:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 418 KB; rules::ProcessConditionsCache: 252 KB; ProcessInfo: 193 KB; ModuleInfoCache: 73 KB; CacheEntry: 67 KB; cloudutils::CloudData: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2667 KB; 2026-05-23 00:22:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 201 KB; ModuleInfoCache: 80 KB; CacheEntry: 73 KB; cloudutils::CloudData: 31 KB; BaseEvent: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2782 KB; 2026-05-23 00:23:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 201 KB; ModuleInfoCache: 80 KB; CacheEntry: 73 KB; cloudutils::CloudData: 31 KB; BaseEvent: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2780 KB; 2026-05-23 00:24:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 201 KB; ModuleInfoCache: 80 KB; CacheEntry: 73 KB; cloudutils::CloudData: 31 KB; BaseEvent: 30 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2780 KB; 2026-05-23 00:25:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 00:25:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 00:25:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 00:25:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 00:25:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:25:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 00:25:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:25:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:25:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 201 KB; ModuleInfoCache: 80 KB; CacheEntry: 73 KB; cloudutils::CloudData: 31 KB; BaseEvent: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2780 KB; 2026-05-23 00:26:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 201 KB; ModuleInfoCache: 80 KB; CacheEntry: 73 KB; cloudutils::CloudData: 31 KB; BaseEvent: 30 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2781 KB; 2026-05-23 00:27:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 304 KB; ProcessInfo: 296 KB; ModuleInfoCache: 80 KB; CacheEntry: 73 KB; TcpIpConnectionsManager: 68 KB; BaseEvent: 50 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3005 KB; 2026-05-23 00:28:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 00:22:24, To:, 2026-05-23 00:28:52, Duration (s):, 388, Events Per Second:, 0.959, Events:, 373, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 266, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 53, Livegrid:, 53, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44189 2026-05-23 00:28:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s882ms. 2026-05-23 00:28:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 303 KB; ProcessInfo: 286 KB; ModuleInfoCache: 80 KB; CacheEntry: 73 KB; TcpIpConnectionsManager: 68 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2931 KB; 2026-05-23 00:29:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 303 KB; ProcessInfo: 286 KB; ModuleInfoCache: 80 KB; CacheEntry: 73 KB; TcpIpConnectionsManager: 68 KB; cloudutils::CloudData: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2936 KB; 2026-05-23 00:30:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 00:30:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 00:30:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 00:30:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 00:30:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:30:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 00:30:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:30:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:30:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 312 KB; ProcessInfo: 295 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; cloudutils::CloudData: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2919 KB; 2026-05-23 00:31:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 312 KB; ProcessInfo: 296 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; cloudutils::CloudData: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2926 KB; 2026-05-23 00:32:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 312 KB; ProcessInfo: 301 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; cloudutils::CloudData: 31 KB; TcpIpConnectionsManager: 27 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2933 KB; 2026-05-23 00:33:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 312 KB; ProcessInfo: 302 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; cloudutils::CloudData: 31 KB; TcpIpConnectionsManager: 27 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2933 KB; 2026-05-23 00:34:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 312 KB; ProcessInfo: 302 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; cloudutils::CloudData: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2940 KB; 2026-05-23 00:35:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 00:35:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 00:35:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 00:35:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 00:35:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:35:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 00:35:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:35:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:35:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 00:29:51, To:, 2026-05-23 00:35:52, Duration (s):, 361, Events Per Second:, 0.138, Events:, 50, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 49, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8641 2026-05-23 00:35:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s479ms. 2026-05-23 00:35:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 315 KB; ProcessInfo: 198 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; cloudutils::CloudData: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2823 KB; 2026-05-23 00:36:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 317 KB; ProcessInfo: 199 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2830 KB; 2026-05-23 00:37:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 315 KB; ProcessInfo: 199 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2833 KB; 2026-05-23 00:38:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 315 KB; ProcessInfo: 199 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2823 KB; 2026-05-23 00:39:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 321 KB; ProcessInfo: 255 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; TcpIpConnectionsManager: 33 KB; cloudutils::CloudData: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2911 KB; 2026-05-23 00:40:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 00:40:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 00:40:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 00:40:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 00:40:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:40:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 00:40:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:40:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:40:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 323 KB; ProcessInfo: 261 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; TcpIpConnectionsManager: 32 KB; cloudutils::CloudData: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2925 KB; 2026-05-23 00:41:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 328 KB; ProcessInfo: 267 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; TcpIpConnectionsManager: 38 KB; cloudutils::CloudData: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2943 KB; 2026-05-23 00:42:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 00:36:17, To:, 2026-05-23 00:42:52, Duration (s):, 395, Events Per Second:, 0.470, Events:, 186, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 185, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24635 2026-05-23 00:42:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s016ms. 2026-05-23 00:42:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 335 KB; ProcessInfo: 208 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; cloudutils::CloudData: 31 KB; TcpIpConnectionsManager: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2865 KB; 2026-05-23 00:43:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 327 KB; ProcessInfo: 208 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; cloudutils::CloudData: 31 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2853 KB; 2026-05-23 00:44:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 457 KB; rules::ProcessConditionsCache: 327 KB; ProcessInfo: 211 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; cloudutils::CloudData: 31 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2855 KB; 2026-05-23 00:45:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 00:45:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 00:45:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 00:45:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 00:45:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:45:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 00:45:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:45:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:45:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; rules::ProcessConditionsCache: 329 KB; ProcessInfo: 215 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; cloudutils::CloudData: 31 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2874 KB; 2026-05-23 00:46:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; rules::ProcessConditionsCache: 327 KB; ProcessInfo: 215 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2871 KB; 2026-05-23 00:47:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; rules::ProcessConditionsCache: 327 KB; ProcessInfo: 215 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2877 KB; 2026-05-23 00:48:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; ProcessInfo: 261 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; TcpIpConnectionsManager: 71 KB; rules::ProcessConditionsCache: 56 KB; cloudutils::CloudData: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2689 KB; 2026-05-23 00:49:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 00:42:53, To:, 2026-05-23 00:49:52, Duration (s):, 419, Events Per Second:, 0.357, Events:, 150, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 149, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19904 2026-05-23 00:49:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s370ms. 2026-05-23 00:49:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; ProcessInfo: 237 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; TcpIpConnectionsManager: 71 KB; rules::ProcessConditionsCache: 36 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2616 KB; 2026-05-23 00:50:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 00:50:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 00:50:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 00:50:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 00:50:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:50:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 00:50:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:50:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:50:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; ProcessInfo: 257 KB; TcpIpConnectionsManager: 84 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; rules::ProcessConditionsCache: 51 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2673 KB; 2026-05-23 00:51:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; ProcessInfo: 257 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; rules::ProcessConditionsCache: 46 KB; TcpIpConnectionsManager: 42 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2636 KB; 2026-05-23 00:52:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; ProcessInfo: 257 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; rules::ProcessConditionsCache: 46 KB; TcpIpConnectionsManager: 33 KB; cloudutils::CloudData: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2636 KB; 2026-05-23 00:53:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; ProcessInfo: 257 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; rules::ProcessConditionsCache: 46 KB; cloudutils::CloudData: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2628 KB; 2026-05-23 00:54:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; ProcessInfo: 257 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; rules::ProcessConditionsCache: 46 KB; cloudutils::CloudData: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2631 KB; 2026-05-23 00:55:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 00:55:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 00:55:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 00:55:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 00:55:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:55:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 00:55:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:55:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 00:55:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; ProcessInfo: 258 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2638 KB; 2026-05-23 00:56:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 00:50:12, To:, 2026-05-23 00:56:52, Duration (s):, 400, Events Per Second:, 0.147, Events:, 59, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 55, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9010 2026-05-23 00:56:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s442ms. 2026-05-23 00:56:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; ProcessInfo: 195 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2565 KB; 2026-05-23 00:57:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; ProcessInfo: 196 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2571 KB; 2026-05-23 00:58:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; ProcessInfo: 196 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2562 KB; 2026-05-23 00:59:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 464 KB; ProcessInfo: 198 KB; ModuleInfoCache: 81 KB; CacheEntry: 74 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2562 KB; 2026-05-23 01:00:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 01:00:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 01:00:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 01:00:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 01:00:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:00:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 01:00:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:00:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:00:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 465 KB; ProcessInfo: 218 KB; ModuleInfoCache: 82 KB; CacheEntry: 75 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2624 KB; 2026-05-23 01:01:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 465 KB; ProcessInfo: 218 KB; ModuleInfoCache: 82 KB; CacheEntry: 75 KB; rules::ProcessConditionsCache: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2628 KB; 2026-05-23 01:02:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 465 KB; ProcessInfo: 220 KB; ModuleInfoCache: 82 KB; CacheEntry: 75 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2637 KB; 2026-05-23 01:03:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 00:56:59, To:, 2026-05-23 01:03:52, Duration (s):, 413, Events Per Second:, 0.147, Events:, 61, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 60, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10353 2026-05-23 01:03:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s723ms. 2026-05-23 01:03:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 465 KB; ProcessInfo: 195 KB; ModuleInfoCache: 82 KB; CacheEntry: 75 KB; rules::ProcessConditionsCache: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2597 KB; 2026-05-23 01:04:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; rules::RuleEvaluationCtx: 468 KB; ModuleMetadata: 465 KB; ProcessInfo: 199 KB; ModuleInfoCache: 82 KB; rules::ProcessConditionsCache: 76 KB; CacheEntry: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 31 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2616 KB; 2026-05-23 01:05:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 01:05:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 01:05:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 01:05:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 01:05:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:05:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 01:05:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:05:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:05:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 475 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 210 KB; ModuleInfoCache: 84 KB; rules::ProcessConditionsCache: 79 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 32 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2639 KB; 2026-05-23 01:06:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 475 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 210 KB; ModuleInfoCache: 84 KB; rules::ProcessConditionsCache: 79 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 32 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2639 KB; 2026-05-23 01:07:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 475 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 210 KB; ModuleInfoCache: 84 KB; rules::ProcessConditionsCache: 79 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2636 KB; 2026-05-23 01:08:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 475 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 210 KB; ModuleInfoCache: 84 KB; rules::ProcessConditionsCache: 79 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2634 KB; 2026-05-23 01:09:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 475 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 210 KB; ModuleInfoCache: 84 KB; rules::ProcessConditionsCache: 79 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2634 KB; 2026-05-23 01:10:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 01:10:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 01:10:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 01:10:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 01:10:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:10:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 01:10:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:10:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:10:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 01:04:13, To:, 2026-05-23 01:10:52, Duration (s):, 399, Events Per Second:, 1.630, Events:, 652, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 629, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 11, Livegrid:, 11, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 78371 2026-05-23 01:10:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s515ms. 2026-05-23 01:10:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 475 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 424 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; ProcessInfoCommandLineTag: 37 KB; cloudutils::CloudData: 32 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2958 KB; 2026-05-23 01:11:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 475 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 424 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; ProcessInfoCommandLineTag: 37 KB; cloudutils::CloudData: 32 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2962 KB; 2026-05-23 01:12:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 475 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 425 KB; rules::ProcessConditionsCache: 162 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; ProcessInfoCommandLineTag: 37 KB; cloudutils::CloudData: 32 KB; TcpIpConnectionsManager: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2971 KB; 2026-05-23 01:13:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 475 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 425 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; ProcessInfoCommandLineTag: 37 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2962 KB; 2026-05-23 01:14:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 475 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 461 KB; rules::ProcessConditionsCache: 228 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; ProcessInfoCommandLineTag: 37 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3104 KB; 2026-05-23 01:15:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 01:15:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 01:15:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 01:15:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 01:15:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:15:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 01:15:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:15:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:15:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 486 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 84 KB; TcpIpConnectionsManager: 83 KB; CacheEntry: 77 KB; ProcessInfoCommandLineTag: 35 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3093 KB; 2026-05-23 01:16:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 492 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 164 KB; TcpIpConnectionsManager: 88 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; ProcessInfoCommandLineTag: 35 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3081 KB; 2026-05-23 01:17:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 01:12:13, To:, 2026-05-23 01:17:52, Duration (s):, 339, Events Per Second:, 0.556, Events:, 189, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 188, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24027 2026-05-23 01:17:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s376ms. 2026-05-23 01:17:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 251 KB; rules::ProcessConditionsCache: 164 KB; ModuleInfoCache: 84 KB; TcpIpConnectionsManager: 78 KB; CacheEntry: 77 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2788 KB; 2026-05-23 01:18:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 254 KB; rules::ProcessConditionsCache: 166 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 37 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2761 KB; 2026-05-23 01:19:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 257 KB; rules::ProcessConditionsCache: 166 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 33 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2761 KB; 2026-05-23 01:20:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 01:20:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 01:20:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 01:20:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 01:20:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:20:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 01:20:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:20:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:20:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 261 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2766 KB; 2026-05-23 01:21:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 262 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2768 KB; 2026-05-23 01:22:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 309 KB; rules::ProcessConditionsCache: 261 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2992 KB; 2026-05-23 01:23:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 309 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2868 KB; 2026-05-23 01:24:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 01:18:09, To:, 2026-05-23 01:24:52, Duration (s):, 403, Events Per Second:, 0.389, Events:, 157, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 156, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19961 2026-05-23 01:24:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s668ms. 2026-05-23 01:24:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 239 KB; rules::ProcessConditionsCache: 171 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2773 KB; 2026-05-23 01:25:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 01:25:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 01:25:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 01:25:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 01:25:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:25:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 01:25:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:25:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:25:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 242 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 53 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2767 KB; 2026-05-23 01:26:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 243 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2747 KB; 2026-05-23 01:27:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 243 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2750 KB; 2026-05-23 01:28:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 243 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2755 KB; 2026-05-23 01:29:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 233 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2888 KB; 2026-05-23 01:30:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 01:30:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 01:30:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 01:30:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 01:30:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:30:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 01:30:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:30:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:30:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 181 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2817 KB; 2026-05-23 01:31:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 01:25:01, To:, 2026-05-23 01:31:52, Duration (s):, 411, Events Per Second:, 0.255, Events:, 105, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 104, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15320 2026-05-23 01:31:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s681ms. 2026-05-23 01:31:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 227 KB; rules::ProcessConditionsCache: 179 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2749 KB; 2026-05-23 01:32:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 230 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 45 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2763 KB; 2026-05-23 01:33:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 230 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2746 KB; 2026-05-23 01:34:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 230 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2750 KB; 2026-05-23 01:35:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 01:35:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 01:35:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 01:35:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 01:35:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:35:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 01:35:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:35:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:35:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 235 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2761 KB; 2026-05-23 01:36:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 239 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2764 KB; 2026-05-23 01:37:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 240 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2770 KB; 2026-05-23 01:38:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 01:31:50, To:, 2026-05-23 01:38:52, Duration (s):, 422, Events Per Second:, 0.080, Events:, 34, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 33, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 5884 2026-05-23 01:38:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s302ms. 2026-05-23 01:38:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 198 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; cloudutils::CloudData: 33 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2723 KB; 2026-05-23 01:39:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 243 KB; rules::ProcessConditionsCache: 190 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2794 KB; 2026-05-23 01:40:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 01:40:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 01:40:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 01:40:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 01:40:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:40:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 01:40:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:40:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:40:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 249 KB; rules::ProcessConditionsCache: 194 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2799 KB; 2026-05-23 01:41:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 249 KB; rules::ProcessConditionsCache: 194 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2804 KB; 2026-05-23 01:42:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 249 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2810 KB; 2026-05-23 01:43:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 227 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 45 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2877 KB; 2026-05-23 01:44:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 476 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 45 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2844 KB; 2026-05-23 01:45:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 01:45:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 01:45:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 01:45:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 01:45:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:45:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 01:45:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:45:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:45:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 01:39:00, To:, 2026-05-23 01:45:52, Duration (s):, 412, Events Per Second:, 0.509, Events:, 210, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 209, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27675 2026-05-23 01:45:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s754ms. 2026-05-23 01:45:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 242 KB; rules::ProcessConditionsCache: 229 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2835 KB; 2026-05-23 01:46:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 242 KB; rules::ProcessConditionsCache: 200 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2801 KB; 2026-05-23 01:47:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 209 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2854 KB; 2026-05-23 01:48:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 198 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2844 KB; 2026-05-23 01:49:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 198 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; TcpIpConnectionsManager: 47 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2827 KB; 2026-05-23 01:50:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 01:50:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 01:50:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 01:50:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 01:50:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:50:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 01:50:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:50:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:50:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 213 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 32 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2841 KB; 2026-05-23 01:51:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 213 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; BaseEvent: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2836 KB; 2026-05-23 01:52:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 01:45:52, To:, 2026-05-23 01:52:52, Duration (s):, 420, Events Per Second:, 0.335, Events:, 141, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 138, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19003 2026-05-23 01:52:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s227ms. 2026-05-23 01:52:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 214 KB; ProcessInfo: 201 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2736 KB; 2026-05-23 01:53:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 214 KB; ProcessInfo: 201 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2736 KB; 2026-05-23 01:54:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 214 KB; ProcessInfo: 201 KB; ModuleInfoCache: 84 KB; CacheEntry: 77 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2736 KB; 2026-05-23 01:55:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 01:55:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 01:55:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 01:55:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 01:55:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:55:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 01:55:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:55:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 01:55:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 234 KB; ProcessInfo: 232 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; cloudutils::CloudData: 32 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2825 KB; 2026-05-23 01:56:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 271 KB; ModuleInfoCache: 85 KB; TcpIpConnectionsManager: 81 KB; CacheEntry: 78 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2954 KB; 2026-05-23 01:57:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 236 KB; ModuleInfoCache: 85 KB; TcpIpConnectionsManager: 83 KB; CacheEntry: 78 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2917 KB; 2026-05-23 01:58:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 282 KB; rules::ProcessConditionsCache: 234 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; TcpIpConnectionsManager: 76 KB; cloudutils::CloudData: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2916 KB; 2026-05-23 01:59:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 01:50:25, To:, 2026-05-23 01:59:52, Duration (s):, 567, Events Per Second:, 0.373, Events:, 212, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 211, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27179 2026-05-23 01:59:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s719ms. 2026-05-23 01:59:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 478 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 233 KB; ProcessInfo: 214 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; TcpIpConnectionsManager: 37 KB; cloudutils::CloudData: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2786 KB; 2026-05-23 02:00:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 02:00:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 02:00:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 02:00:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 02:00:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:00:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 02:00:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:00:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:00:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 253 KB; ProcessInfo: 233 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2831 KB; 2026-05-23 02:01:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 253 KB; ProcessInfo: 233 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2834 KB; 2026-05-23 02:02:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 253 KB; ProcessInfo: 236 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2845 KB; 2026-05-23 02:03:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 253 KB; ProcessInfo: 236 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2848 KB; 2026-05-23 02:04:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 253 KB; ProcessInfo: 236 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2854 KB; 2026-05-23 02:05:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 02:05:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 02:05:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 02:05:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 02:05:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:05:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 02:05:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:05:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:05:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 255 KB; ProcessInfo: 239 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2848 KB; 2026-05-23 02:06:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 02:00:00, To:, 2026-05-23 02:06:52, Duration (s):, 412, Events Per Second:, 0.162, Events:, 67, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 66, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10710 2026-05-23 02:06:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s725ms. 2026-05-23 02:06:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 259 KB; ProcessInfo: 199 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2797 KB; 2026-05-23 02:07:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 261 KB; ProcessInfo: 202 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2804 KB; 2026-05-23 02:08:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 261 KB; ProcessInfo: 202 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 33 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2810 KB; 2026-05-23 02:09:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 265 KB; ProcessInfo: 248 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2885 KB; 2026-05-23 02:10:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 02:10:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 02:10:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 02:10:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 02:10:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:10:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 02:10:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:10:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:10:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 274 KB; ProcessInfo: 255 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2906 KB; 2026-05-23 02:11:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 270 KB; ProcessInfo: 255 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2901 KB; 2026-05-23 02:12:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 274 KB; ProcessInfo: 259 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 33 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2913 KB; 2026-05-23 02:13:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 02:07:39, To:, 2026-05-23 02:13:52, Duration (s):, 373, Events Per Second:, 0.433, Events:, 162, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 161, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21562 2026-05-23 02:13:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s677ms. 2026-05-23 02:13:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 274 KB; ProcessInfo: 202 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 33 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2835 KB; 2026-05-23 02:14:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 272 KB; ProcessInfo: 204 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 33 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2836 KB; 2026-05-23 02:15:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 02:15:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 02:15:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 02:15:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 02:15:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:15:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 02:15:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:15:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:15:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 272 KB; ProcessInfo: 207 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 33 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2825 KB; 2026-05-23 02:16:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 272 KB; ProcessInfo: 207 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 33 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2828 KB; 2026-05-23 02:17:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 276 KB; ProcessInfo: 212 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2835 KB; 2026-05-23 02:18:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 280 KB; ProcessInfo: 235 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; TcpIpConnectionsManager: 47 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2870 KB; 2026-05-23 02:19:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 276 KB; ProcessInfo: 236 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; TcpIpConnectionsManager: 47 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2872 KB; 2026-05-23 02:20:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 02:20:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 02:20:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 02:20:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 02:20:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:20:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 02:20:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:20:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:20:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 02:13:53, To:, 2026-05-23 02:20:52, Duration (s):, 419, Events Per Second:, 0.250, Events:, 105, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 104, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15278 2026-05-23 02:20:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s708ms. 2026-05-23 02:20:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 281 KB; ProcessInfo: 223 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; TcpIpConnectionsManager: 45 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2857 KB; 2026-05-23 02:21:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 281 KB; ProcessInfo: 226 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2844 KB; 2026-05-23 02:22:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 281 KB; ProcessInfo: 226 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2850 KB; 2026-05-23 02:23:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 341 KB; ProcessInfo: 259 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; TcpIpConnectionsManager: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2993 KB; 2026-05-23 02:24:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 312 KB; ProcessInfo: 283 KB; ModuleInfoCache: 85 KB; TcpIpConnectionsManager: 84 KB; CacheEntry: 78 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3021 KB; 2026-05-23 02:25:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 02:25:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 02:25:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 02:25:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 02:25:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:25:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 02:25:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:25:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:25:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 306 KB; TcpIpConnectionsManager: 120 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; cloudutils::CloudData: 33 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3076 KB; 2026-05-23 02:26:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 288 KB; TcpIpConnectionsManager: 116 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; cloudutils::CloudData: 33 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3061 KB; 2026-05-23 02:27:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 02:21:41, To:, 2026-05-23 02:27:52, Duration (s):, 371, Events Per Second:, 0.729, Events:, 271, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 270, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32467 2026-05-23 02:27:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s801ms. 2026-05-23 02:27:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 285 KB; ProcessInfo: 246 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2902 KB; 2026-05-23 02:28:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 287 KB; ProcessInfo: 248 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; TcpIpConnectionsManager: 33 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2881 KB; 2026-05-23 02:29:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 481 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 287 KB; ProcessInfo: 251 KB; ModuleInfoCache: 85 KB; CacheEntry: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2879 KB; 2026-05-23 02:30:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 02:30:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 02:30:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 02:30:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 02:30:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:30:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 02:30:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:30:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:30:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 294 KB; ProcessInfo: 257 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2904 KB; 2026-05-23 02:31:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 294 KB; ProcessInfo: 257 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2909 KB; 2026-05-23 02:32:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 294 KB; ProcessInfo: 257 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2906 KB; 2026-05-23 02:33:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 296 KB; ProcessInfo: 258 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2916 KB; 2026-05-23 02:34:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 02:28:06, To:, 2026-05-23 02:34:52, Duration (s):, 406, Events Per Second:, 0.061, Events:, 25, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 24, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 4742 2026-05-23 02:34:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s685ms. 2026-05-23 02:34:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 468 KB; rules::ProcessConditionsCache: 293 KB; ProcessInfo: 196 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2841 KB; 2026-05-23 02:35:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 02:35:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 02:35:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 02:35:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 02:35:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:35:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 02:35:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:35:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:35:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 295 KB; ProcessInfo: 198 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2840 KB; 2026-05-23 02:36:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 295 KB; ProcessInfo: 198 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2843 KB; 2026-05-23 02:37:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 295 KB; ProcessInfo: 198 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2849 KB; 2026-05-23 02:38:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 295 KB; ProcessInfo: 198 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2852 KB; 2026-05-23 02:39:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 299 KB; ProcessInfo: 243 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2931 KB; 2026-05-23 02:40:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 02:40:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 02:40:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 02:40:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 02:40:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:40:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 02:40:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:40:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:40:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 306 KB; ProcessInfo: 248 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2947 KB; 2026-05-23 02:41:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 02:35:01, To:, 2026-05-23 02:41:52, Duration (s):, 411, Events Per Second:, 0.337, Events:, 139, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 138, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17488 2026-05-23 02:41:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s754ms. 2026-05-23 02:41:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 306 KB; ProcessInfo: 243 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2928 KB; 2026-05-23 02:42:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 306 KB; ProcessInfo: 245 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2934 KB; 2026-05-23 02:43:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 306 KB; ProcessInfo: 245 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2932 KB; 2026-05-23 02:44:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleMetadata: 485 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 361 KB; ProcessInfo: 270 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; TcpIpConnectionsManager: 47 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3039 KB; 2026-05-23 02:45:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 02:45:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 02:45:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 02:45:33 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 02:45:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:45:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 02:45:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:45:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:45:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleMetadata: 489 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 310 KB; ProcessInfo: 271 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; TcpIpConnectionsManager: 45 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2961 KB; 2026-05-23 02:46:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 295 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3022 KB; 2026-05-23 02:47:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 310 KB; ProcessInfo: 301 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3015 KB; 2026-05-23 02:48:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 02:42:35, To:, 2026-05-23 02:48:52, Duration (s):, 377, Events Per Second:, 0.418, Events:, 158, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 155, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20561 2026-05-23 02:48:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s745ms. 2026-05-23 02:48:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 310 KB; ProcessInfo: 223 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2891 KB; 2026-05-23 02:49:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 308 KB; ProcessInfo: 223 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; cloudutils::CloudData: 33 KB; TcpIpConnectionsManager: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2874 KB; 2026-05-23 02:50:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 02:50:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 02:50:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 02:50:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 02:50:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:50:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 02:50:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:50:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:50:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 317 KB; ProcessInfo: 229 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2886 KB; 2026-05-23 02:51:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 317 KB; ProcessInfo: 229 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2893 KB; 2026-05-23 02:52:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 315 KB; ProcessInfo: 229 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2893 KB; 2026-05-23 02:53:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 315 KB; ProcessInfo: 230 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2898 KB; 2026-05-23 02:54:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 324 KB; ProcessInfo: 239 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; cloudutils::CloudData: 33 KB; TcpIpConnectionsManager: 27 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2925 KB; 2026-05-23 02:55:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 02:55:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 02:55:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 02:55:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 02:55:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:55:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 02:55:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:55:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 02:55:52 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 02:49:43, To:, 2026-05-23 02:55:52, Duration (s):, 369, Events Per Second:, 0.143, Events:, 53, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 50, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8801 2026-05-23 02:55:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s960ms. 2026-05-23 02:55:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 324 KB; ProcessInfo: 210 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; cloudutils::CloudData: 33 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2877 KB; 2026-05-23 02:56:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 322 KB; ProcessInfo: 210 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2878 KB; 2026-05-23 02:57:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 322 KB; ProcessInfo: 210 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; cloudutils::CloudData: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2877 KB; 2026-05-23 02:58:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 324 KB; ProcessInfo: 210 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2882 KB; 2026-05-23 02:59:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleMetadata: 490 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 324 KB; ProcessInfo: 210 KB; ModuleInfoCache: 86 KB; CacheEntry: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 19 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2885 KB; 2026-05-23 03:00:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 03:00:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 03:00:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 03:00:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 03:00:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:00:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 03:00:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:00:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:00:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 403 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; rules::ProcessConditionsCache: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 38 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2888 KB; 2026-05-23 03:01:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 403 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; BaseEvent: 39 KB; rules::ProcessConditionsCache: 36 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2875 KB; 2026-05-23 03:02:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 02:56:17, To:, 2026-05-23 03:02:52, Duration (s):, 395, Events Per Second:, 1.260, Events:, 499, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 498, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58033 2026-05-23 03:02:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s105ms. 2026-05-23 03:02:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 392 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; rules::ProcessConditionsCache: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2816 KB; 2026-05-23 03:03:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 392 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::ProcessConditionsCache: 36 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2810 KB; 2026-05-23 03:04:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 392 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::ProcessConditionsCache: 36 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2811 KB; 2026-05-23 03:05:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 03:05:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 03:05:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 03:05:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 03:05:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:05:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 03:05:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:05:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:05:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 396 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::ProcessConditionsCache: 40 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2814 KB; 2026-05-23 03:06:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 406 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; rules::ProcessConditionsCache: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2832 KB; 2026-05-23 03:07:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 412 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; rules::ProcessConditionsCache: 40 KB; TcpIpConnectionsManager: 38 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2839 KB; 2026-05-23 03:08:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 412 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; rules::ProcessConditionsCache: 40 KB; TcpIpConnectionsManager: 38 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2846 KB; 2026-05-23 03:09:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 03:02:52, To:, 2026-05-23 03:09:53, Duration (s):, 421, Events Per Second:, 0.439, Events:, 185, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 184, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24079 2026-05-23 03:09:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s720ms. 2026-05-23 03:09:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 251 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; rules::ProcessConditionsCache: 49 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2668 KB; 2026-05-23 03:10:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 03:10:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 03:10:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 03:10:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 03:10:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:10:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 03:10:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:10:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:10:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 258 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; rules::ProcessConditionsCache: 58 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2689 KB; 2026-05-23 03:11:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 315 KB; rules::ProcessConditionsCache: 93 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2808 KB; 2026-05-23 03:12:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 315 KB; rules::ProcessConditionsCache: 93 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2812 KB; 2026-05-23 03:13:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 315 KB; rules::ProcessConditionsCache: 93 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2815 KB; 2026-05-23 03:14:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 496 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 315 KB; rules::ProcessConditionsCache: 91 KB; ModuleInfoCache: 87 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; TcpIpConnectionsManager: 20 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2812 KB; 2026-05-23 03:15:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 03:15:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 03:15:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 03:15:34 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 03:15:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:15:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 03:15:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:15:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:15:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 318 KB; ModuleInfoCache: 99 KB; rules::ProcessConditionsCache: 93 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; TcpIpConnectionsManager: 20 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2823 KB; 2026-05-23 03:16:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 03:10:01, To:, 2026-05-23 03:16:53, Duration (s):, 412, Events Per Second:, 0.425, Events:, 175, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 174, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23514 2026-05-23 03:16:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s490ms. 2026-05-23 03:16:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 208 KB; ModuleInfoCache: 99 KB; rules::ProcessConditionsCache: 98 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2694 KB; 2026-05-23 03:17:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 214 KB; rules::ProcessConditionsCache: 100 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2705 KB; 2026-05-23 03:18:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 214 KB; rules::ProcessConditionsCache: 100 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2710 KB; 2026-05-23 03:19:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 214 KB; rules::ProcessConditionsCache: 100 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2710 KB; 2026-05-23 03:20:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 03:20:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 03:20:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 03:20:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 03:20:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:20:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 03:20:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:20:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:20:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 220 KB; rules::ProcessConditionsCache: 105 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2728 KB; 2026-05-23 03:21:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 230 KB; rules::ProcessConditionsCache: 107 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2742 KB; 2026-05-23 03:22:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 232 KB; rules::ProcessConditionsCache: 107 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2759 KB; 2026-05-23 03:23:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 03:17:01, To:, 2026-05-23 03:23:53, Duration (s):, 412, Events Per Second:, 0.138, Events:, 57, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 56, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8668 2026-05-23 03:23:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s516ms. 2026-05-23 03:23:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 212 KB; rules::ProcessConditionsCache: 107 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2730 KB; 2026-05-23 03:24:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 212 KB; rules::ProcessConditionsCache: 107 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2715 KB; 2026-05-23 03:25:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 03:25:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 03:25:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 03:25:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 03:25:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:25:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 03:25:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:25:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:25:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 215 KB; rules::ProcessConditionsCache: 109 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2713 KB; 2026-05-23 03:26:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 215 KB; rules::ProcessConditionsCache: 109 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2717 KB; 2026-05-23 03:27:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 215 KB; rules::ProcessConditionsCache: 109 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2723 KB; 2026-05-23 03:28:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 217 KB; rules::ProcessConditionsCache: 107 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2722 KB; 2026-05-23 03:29:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 224 KB; rules::ProcessConditionsCache: 109 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2732 KB; 2026-05-23 03:30:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 03:30:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 03:30:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 03:30:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 03:30:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:30:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 03:30:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:30:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:30:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 03:24:43, To:, 2026-05-23 03:30:53, Duration (s):, 370, Events Per Second:, 0.119, Events:, 44, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 43, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7598 2026-05-23 03:30:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s519ms. 2026-05-23 03:30:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 214 KB; rules::ProcessConditionsCache: 113 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2729 KB; 2026-05-23 03:31:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 215 KB; rules::ProcessConditionsCache: 115 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2735 KB; 2026-05-23 03:32:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 220 KB; rules::ProcessConditionsCache: 115 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2737 KB; 2026-05-23 03:33:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 221 KB; rules::ProcessConditionsCache: 112 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2743 KB; 2026-05-23 03:34:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 221 KB; rules::ProcessConditionsCache: 112 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2745 KB; 2026-05-23 03:35:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 03:35:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 03:35:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 03:35:35 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 03:35:35 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:35:35 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 03:35:35 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:35:35 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:35:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 223 KB; rules::ProcessConditionsCache: 115 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2736 KB; 2026-05-23 03:36:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 223 KB; rules::ProcessConditionsCache: 115 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2741 KB; 2026-05-23 03:37:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 03:31:11, To:, 2026-05-23 03:37:53, Duration (s):, 402, Events Per Second:, 0.065, Events:, 26, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 25, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 4449 2026-05-23 03:37:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s557ms. 2026-05-23 03:37:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 202 KB; rules::ProcessConditionsCache: 116 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2717 KB; 2026-05-23 03:38:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 204 KB; rules::ProcessConditionsCache: 118 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2727 KB; 2026-05-23 03:39:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 249 KB; rules::ProcessConditionsCache: 122 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2802 KB; 2026-05-23 03:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 03:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:40:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 03:40:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 03:40:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 03:40:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 03:40:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 254 KB; rules::ProcessConditionsCache: 127 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2809 KB; 2026-05-23 03:41:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 255 KB; rules::ProcessConditionsCache: 129 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2817 KB; 2026-05-23 03:42:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 255 KB; rules::ProcessConditionsCache: 129 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2819 KB; 2026-05-23 03:43:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 257 KB; rules::ProcessConditionsCache: 129 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2824 KB; 2026-05-23 03:44:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 03:38:25, To:, 2026-05-23 03:44:53, Duration (s):, 388, Events Per Second:, 0.363, Events:, 141, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 140, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18802 2026-05-23 03:44:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s747ms. 2026-05-23 03:44:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 204 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2752 KB; 2026-05-23 03:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 03:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:45:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 03:45:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 03:45:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 03:45:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 03:45:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 207 KB; rules::ProcessConditionsCache: 132 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2748 KB; 2026-05-23 03:46:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 207 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2746 KB; 2026-05-23 03:47:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 207 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2750 KB; 2026-05-23 03:48:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 208 KB; rules::ProcessConditionsCache: 132 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2761 KB; 2026-05-23 03:49:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 215 KB; rules::ProcessConditionsCache: 139 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2773 KB; 2026-05-23 03:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 03:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:50:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 03:50:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 03:50:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 03:50:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 03:50:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 220 KB; rules::ProcessConditionsCache: 165 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2800 KB; 2026-05-23 03:51:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 03:45:00, To:, 2026-05-23 03:51:53, Duration (s):, 413, Events Per Second:, 0.126, Events:, 52, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 41, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7999 2026-05-23 03:51:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s742ms. 2026-05-23 03:51:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 220 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; TcpIpConnectionsManager: 35 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2827 KB; 2026-05-23 03:52:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 220 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2787 KB; 2026-05-23 03:53:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 220 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2791 KB; 2026-05-23 03:54:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 221 KB; rules::ProcessConditionsCache: 170 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2800 KB; 2026-05-23 03:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 03:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 03:55:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 03:55:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 03:55:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 03:55:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 03:55:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 224 KB; rules::ProcessConditionsCache: 170 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2790 KB; 2026-05-23 03:56:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 226 KB; rules::ProcessConditionsCache: 172 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2797 KB; 2026-05-23 03:57:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 227 KB; rules::ProcessConditionsCache: 170 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2798 KB; 2026-05-23 03:58:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 03:51:51, To:, 2026-05-23 03:58:53, Duration (s):, 422, Events Per Second:, 0.178, Events:, 75, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 36, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 19, Livegrid:, 19, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9323 2026-05-23 03:58:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s748ms. 2026-05-23 03:58:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 204 KB; rules::ProcessConditionsCache: 170 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2756 KB; 2026-05-23 03:59:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 498 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 205 KB; rules::ProcessConditionsCache: 170 KB; ModuleInfoCache: 99 KB; CacheEntry: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2760 KB; 2026-05-23 04:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 04:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:00:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 04:00:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 04:00:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 04:00:36 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 04:00:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 226 KB; rules::ProcessConditionsCache: 190 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2831 KB; 2026-05-23 04:01:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 226 KB; rules::ProcessConditionsCache: 190 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2832 KB; 2026-05-23 04:02:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 232 KB; rules::ProcessConditionsCache: 187 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2841 KB; 2026-05-23 04:03:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 232 KB; rules::ProcessConditionsCache: 187 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2844 KB; 2026-05-23 04:04:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 232 KB; rules::ProcessConditionsCache: 190 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2855 KB; 2026-05-23 04:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 04:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:05:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 04:05:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 04:05:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 04:05:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 04:05:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 03:59:51, To:, 2026-05-23 04:05:53, Duration (s):, 362, Events Per Second:, 0.312, Events:, 113, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 74, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 19, Livegrid:, 19, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15237 2026-05-23 04:05:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s250ms. 2026-05-23 04:05:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 204 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2784 KB; 2026-05-23 04:06:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 204 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2785 KB; 2026-05-23 04:07:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 205 KB; rules::ProcessConditionsCache: 194 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2800 KB; 2026-05-23 04:08:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 237 KB; rules::ProcessConditionsCache: 194 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 177 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2995 KB; 2026-05-23 04:09:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 283 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 266 KB; rules::ProcessConditionsCache: 196 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; BaseEvent: 68 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3222 KB; 2026-05-23 04:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 04:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:10:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 04:10:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 04:10:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 04:10:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 04:10:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 287 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 283 KB; rules::ProcessConditionsCache: 203 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; BaseEvent: 68 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3251 KB; 2026-05-23 04:11:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 342 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 289 KB; rules::ProcessConditionsCache: 236 KB; ModuleInfoCache: 99 KB; BaseEvent: 94 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3355 KB; 2026-05-23 04:12:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 04:07:55, To:, 2026-05-23 04:12:53, Duration (s):, 298, Events Per Second:, 1.993, Events:, 594, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 369, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 112, Livegrid:, 112, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 64416 2026-05-23 04:12:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s369ms. 2026-05-23 04:12:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 178 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3035 KB; 2026-05-23 04:13:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 155 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3013 KB; 2026-05-23 04:14:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 267 KB; rules::ProcessConditionsCache: 232 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 159 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3011 KB; 2026-05-23 04:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 04:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:15:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 04:15:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 04:15:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 04:15:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 04:15:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 162 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2999 KB; 2026-05-23 04:16:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 274 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 168 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 3032 KB; 2026-05-23 04:17:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 283 KB; rules::ProcessConditionsCache: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 124 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3017 KB; 2026-05-23 04:18:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2968 KB; 2026-05-23 04:19:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 04:13:12, To:, 2026-05-23 04:19:53, Duration (s):, 401, Events Per Second:, 0.252, Events:, 101, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 100, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14219 2026-05-23 04:19:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s731ms. 2026-05-23 04:19:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 240 KB; ProcessInfo: 236 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2886 KB; 2026-05-23 04:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 04:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:20:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 04:20:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 04:20:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 04:20:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 04:20:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 246 KB; ProcessInfo: 243 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; TcpIpConnectionsManager: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2905 KB; 2026-05-23 04:21:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 246 KB; ProcessInfo: 243 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2887 KB; 2026-05-23 04:22:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 246 KB; ProcessInfo: 245 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2891 KB; 2026-05-23 04:23:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 246 KB; ProcessInfo: 245 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2894 KB; 2026-05-23 04:24:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 246 KB; ProcessInfo: 246 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2905 KB; 2026-05-23 04:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 04:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:25:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 04:25:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 04:25:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 04:25:37 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 04:25:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 249 KB; rules::ProcessConditionsCache: 249 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2903 KB; 2026-05-23 04:26:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 04:20:09, To:, 2026-05-23 04:26:53, Duration (s):, 404, Events Per Second:, 0.097, Events:, 39, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 38, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7141 2026-05-23 04:26:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s680ms. 2026-05-23 04:26:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 246 KB; ProcessInfo: 210 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2850 KB; 2026-05-23 04:27:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 246 KB; ProcessInfo: 210 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2854 KB; 2026-05-23 04:28:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 246 KB; ProcessInfo: 210 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2856 KB; 2026-05-23 04:29:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleMetadata: 501 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 246 KB; ProcessInfo: 211 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2862 KB; 2026-05-23 04:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 04:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:30:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 04:30:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 04:30:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 04:30:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 04:30:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 252 KB; ProcessInfo: 217 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2883 KB; 2026-05-23 04:31:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 254 KB; ProcessInfo: 240 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; TcpIpConnectionsManager: 46 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2886 KB; 2026-05-23 04:32:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 296 KB; ProcessInfo: 265 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 34 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3018 KB; 2026-05-23 04:33:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 04:29:51, To:, 2026-05-23 04:33:53, Duration (s):, 242, Events Per Second:, 0.818, Events:, 198, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 145, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23427 2026-05-23 04:33:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s726ms. 2026-05-23 04:33:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 249 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2926 KB; 2026-05-23 04:34:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 256 KB; ProcessInfo: 249 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; TcpIpConnectionsManager: 47 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2903 KB; 2026-05-23 04:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 04:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:35:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 04:35:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 04:35:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 04:35:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 04:35:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 254 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; TcpIpConnectionsManager: 36 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2883 KB; 2026-05-23 04:36:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 254 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2878 KB; 2026-05-23 04:37:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 254 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2878 KB; 2026-05-23 04:38:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 258 KB; ProcessInfo: 254 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2882 KB; 2026-05-23 04:39:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 262 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2955 KB; 2026-05-23 04:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 04:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:40:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 04:40:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 04:40:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 04:40:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 04:40:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 04:34:10, To:, 2026-05-23 04:40:53, Duration (s):, 403, Events Per Second:, 0.347, Events:, 140, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 139, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18071 2026-05-23 04:40:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s684ms. 2026-05-23 04:40:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 269 KB; ProcessInfo: 249 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2897 KB; 2026-05-23 04:41:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 269 KB; ProcessInfo: 249 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2902 KB; 2026-05-23 04:42:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 269 KB; ProcessInfo: 261 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; TcpIpConnectionsManager: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2918 KB; 2026-05-23 04:43:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 269 KB; ProcessInfo: 261 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2922 KB; 2026-05-23 04:44:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleMetadata: 503 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 269 KB; ProcessInfo: 261 KB; ModuleInfoCache: 99 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 34 KB; TcpIpConnectionsManager: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2926 KB; 2026-05-23 04:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 04:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:45:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 04:45:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 04:45:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 04:45:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 04:45:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 271 KB; ProcessInfo: 264 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2931 KB; 2026-05-23 04:46:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 273 KB; ProcessInfo: 265 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2943 KB; 2026-05-23 04:47:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 04:42:19, To:, 2026-05-23 04:47:53, Duration (s):, 334, Events Per Second:, 0.162, Events:, 54, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 53, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8347 2026-05-23 04:47:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s672ms. 2026-05-23 04:47:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 278 KB; ProcessInfo: 214 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 35 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2889 KB; 2026-05-23 04:48:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 271 KB; ProcessInfo: 220 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; TcpIpConnectionsManager: 38 KB; cloudutils::CloudData: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2881 KB; 2026-05-23 04:49:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 271 KB; ProcessInfo: 220 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; TcpIpConnectionsManager: 38 KB; cloudutils::CloudData: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2887 KB; 2026-05-23 04:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 04:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:50:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 04:50:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 04:50:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 04:50:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 04:50:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 278 KB; ProcessInfo: 226 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; cloudutils::CloudData: 35 KB; TcpIpConnectionsManager: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2921 KB; 2026-05-23 04:51:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 278 KB; ProcessInfo: 226 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; cloudutils::CloudData: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2915 KB; 2026-05-23 04:52:57 75ed55ffc6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 560 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 280 KB; ProcessInfo: 226 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2944 KB; 2026-05-23 04:53:57 75ed55ffc6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 560 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 280 KB; ProcessInfo: 226 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2950 KB; 2026-05-23 04:54:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 04:47:54, To:, 2026-05-23 04:54:53, Duration (s):, 419, Events Per Second:, 0.103, Events:, 43, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 42, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7040 2026-05-23 04:54:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s670ms. 2026-05-23 04:54:57 75ed55ffc6c0 Info: Allocations: (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 560 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 279 KB; ProcessInfo: 201 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2920 KB; 2026-05-23 04:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 04:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 04:55:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 04:55:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 04:55:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 04:55:38 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 04:55:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 281 KB; ProcessInfo: 205 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2892 KB; 2026-05-23 04:56:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 283 KB; ProcessInfo: 218 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; TcpIpConnectionsManager: 38 KB; cloudutils::CloudData: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2911 KB; 2026-05-23 04:57:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 281 KB; ProcessInfo: 218 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; TcpIpConnectionsManager: 38 KB; cloudutils::CloudData: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2915 KB; 2026-05-23 04:58:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 279 KB; ProcessInfo: 218 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; cloudutils::CloudData: 35 KB; TcpIpConnectionsManager: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2911 KB; 2026-05-23 04:59:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleMetadata: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 279 KB; ProcessInfo: 220 KB; ModuleInfoCache: 101 KB; CacheEntry: 84 KB; cloudutils::CloudData: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2908 KB; 2026-05-23 05:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 05:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:00:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 05:00:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 05:00:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 05:00:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 05:00:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleMetadata: 521 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 303 KB; ProcessInfo: 252 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2992 KB; 2026-05-23 05:01:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 04:55:00, To:, 2026-05-23 05:01:53, Duration (s):, 413, Events Per Second:, 0.329, Events:, 136, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 135, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19880 2026-05-23 05:01:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s691ms. 2026-05-23 05:01:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleMetadata: 521 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 302 KB; ProcessInfo: 237 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; TcpIpConnectionsManager: 36 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2936 KB; 2026-05-23 05:02:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleMetadata: 521 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 300 KB; ProcessInfo: 237 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; TcpIpConnectionsManager: 36 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2941 KB; 2026-05-23 05:03:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleMetadata: 521 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 300 KB; ProcessInfo: 237 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 24 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2934 KB; 2026-05-23 05:04:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleMetadata: 521 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 302 KB; ProcessInfo: 237 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2942 KB; 2026-05-23 05:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 05:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:05:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 05:05:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 05:05:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 05:05:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 05:05:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 304 KB; ProcessInfo: 240 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2938 KB; 2026-05-23 05:06:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 304 KB; ProcessInfo: 240 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2941 KB; 2026-05-23 05:07:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 304 KB; ProcessInfo: 240 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2947 KB; 2026-05-23 05:08:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 05:01:54, To:, 2026-05-23 05:08:53, Duration (s):, 419, Events Per Second:, 0.029, Events:, 12, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 11, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 2625 2026-05-23 05:08:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s617ms. 2026-05-23 05:08:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 302 KB; ProcessInfo: 201 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2897 KB; 2026-05-23 05:09:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleMetadata: 521 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 306 KB; ProcessInfo: 245 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2972 KB; 2026-05-23 05:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 05:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:10:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 05:10:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 05:10:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 05:10:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 05:10:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleMetadata: 521 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 313 KB; ProcessInfo: 249 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2988 KB; 2026-05-23 05:11:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleMetadata: 521 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 315 KB; ProcessInfo: 251 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2997 KB; 2026-05-23 05:12:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleMetadata: 521 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 343 KB; ProcessInfo: 306 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; TcpIpConnectionsManager: 21 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3109 KB; 2026-05-23 05:13:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 521 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 345 KB; ProcessInfo: 308 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3119 KB; 2026-05-23 05:14:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleMetadata: 521 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 343 KB; ProcessInfo: 308 KB; ModuleInfoCache: 102 KB; CacheEntry: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3120 KB; 2026-05-23 05:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 05:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:15:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 05:15:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 05:15:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 05:15:39 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 05:15:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 05:08:59, To:, 2026-05-23 05:15:53, Duration (s):, 414, Events Per Second:, 0.683, Events:, 283, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 282, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36202 2026-05-23 05:15:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s278ms. 2026-05-23 05:15:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 346 KB; ProcessInfo: 211 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2975 KB; 2026-05-23 05:16:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleMetadata: 528 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 350 KB; ProcessInfo: 212 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3007 KB; 2026-05-23 05:17:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 528 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 352 KB; ProcessInfo: 217 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3010 KB; 2026-05-23 05:18:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 528 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 353 KB; ProcessInfo: 217 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3003 KB; 2026-05-23 05:19:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 528 KB; rules::RuleEvaluationCtx: 472 KB; rules::ProcessConditionsCache: 355 KB; ProcessInfo: 218 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3015 KB; 2026-05-23 05:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 05:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:20:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 05:20:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 05:20:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 05:20:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 05:20:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 142 KB; ModuleInfoCache: 103 KB; TcpIpConnectionsManager: 85 KB; CacheEntry: 85 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2916 KB; 2026-05-23 05:21:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 280 KB; ModuleInfoCache: 103 KB; TcpIpConnectionsManager: 85 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 36 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2801 KB; 2026-05-23 05:22:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 05:16:12, To:, 2026-05-23 05:22:53, Duration (s):, 401, Events Per Second:, 0.461, Events:, 185, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 184, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23670 2026-05-23 05:22:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s178ms. 2026-05-23 05:22:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 267 KB; ModuleInfoCache: 103 KB; TcpIpConnectionsManager: 85 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 37 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2769 KB; 2026-05-23 05:23:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 273 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; TcpIpConnectionsManager: 70 KB; rules::ProcessConditionsCache: 37 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2763 KB; 2026-05-23 05:24:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 283 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; TcpIpConnectionsManager: 39 KB; rules::ProcessConditionsCache: 39 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2755 KB; 2026-05-23 05:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 05:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:25:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 05:25:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 05:25:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 05:25:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 05:25:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 286 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 42 KB; TcpIpConnectionsManager: 39 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2756 KB; 2026-05-23 05:26:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 292 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 43 KB; TcpIpConnectionsManager: 39 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2761 KB; 2026-05-23 05:27:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 292 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 41 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2753 KB; 2026-05-23 05:28:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 292 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 41 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2757 KB; 2026-05-23 05:29:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 05:23:23, To:, 2026-05-23 05:29:53, Duration (s):, 390, Events Per Second:, 0.197, Events:, 77, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 76, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12289 2026-05-23 05:29:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s506ms. 2026-05-23 05:29:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 210 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 42 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2653 KB; 2026-05-23 05:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 05:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:30:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 05:30:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 05:30:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 05:30:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 05:30:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 215 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 53 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2681 KB; 2026-05-23 05:31:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 215 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 51 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2680 KB; 2026-05-23 05:32:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 215 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 51 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2685 KB; 2026-05-23 05:33:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 215 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2690 KB; 2026-05-23 05:34:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 262 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2865 KB; 2026-05-23 05:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 05:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:35:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 05:35:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 05:35:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 05:35:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 05:35:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 264 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; TcpIpConnectionsManager: 72 KB; rules::ProcessConditionsCache: 56 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2776 KB; 2026-05-23 05:36:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 05:29:55, To:, 2026-05-23 05:36:53, Duration (s):, 418, Events Per Second:, 0.359, Events:, 150, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 149, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19443 2026-05-23 05:36:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s589ms. 2026-05-23 05:36:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 251 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; TcpIpConnectionsManager: 74 KB; rules::ProcessConditionsCache: 56 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2750 KB; 2026-05-23 05:37:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 251 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; TcpIpConnectionsManager: 70 KB; rules::ProcessConditionsCache: 54 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2748 KB; 2026-05-23 05:38:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 251 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 56 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2713 KB; 2026-05-23 05:39:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 298 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 60 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2792 KB; 2026-05-23 05:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 05:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:40:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 05:40:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 05:40:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 05:40:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 05:40:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleMetadata: 528 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 304 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 65 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2831 KB; 2026-05-23 05:41:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 304 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 65 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2813 KB; 2026-05-23 05:42:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 305 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 65 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2819 KB; 2026-05-23 05:43:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 05:37:16, To:, 2026-05-23 05:43:53, Duration (s):, 397, Events Per Second:, 0.368, Events:, 146, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 145, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19153 2026-05-23 05:43:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s952ms. 2026-05-23 05:43:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 224 KB; rules::ProcessConditionsCache: 122 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; TcpIpConnectionsManager: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2799 KB; 2026-05-23 05:44:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; ModuleMetadata: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 251 KB; ModuleInfoCache: 103 KB; CacheEntry: 85 KB; rules::ProcessConditionsCache: 82 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2807 KB; 2026-05-23 05:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 05:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:45:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 05:45:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 05:45:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 05:45:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 05:45:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 257 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; rules::ProcessConditionsCache: 78 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2810 KB; 2026-05-23 05:46:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 257 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; rules::ProcessConditionsCache: 78 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 36 KB; BaseEvent: 26 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2824 KB; 2026-05-23 05:47:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 257 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 36 KB; BaseEvent: 32 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2787 KB; 2026-05-23 05:48:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 257 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 36 KB; BaseEvent: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2781 KB; 2026-05-23 05:49:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 257 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 36 KB; BaseEvent: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2781 KB; 2026-05-23 05:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 05:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:50:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 05:50:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 05:50:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 05:50:40 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 05:50:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 05:43:53, To:, 2026-05-23 05:50:53, Duration (s):, 420, Events Per Second:, 0.490, Events:, 206, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 137, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 34, Livegrid:, 34, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24464 2026-05-23 05:50:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s671ms. 2026-05-23 05:50:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 205 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2686 KB; 2026-05-23 05:51:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 233 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 96 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2768 KB; 2026-05-23 05:52:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 233 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 98 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2798 KB; 2026-05-23 05:53:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 235 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 100 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2810 KB; 2026-05-23 05:54:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 235 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 96 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2780 KB; 2026-05-23 05:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 05:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 05:55:41 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 05:55:41 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 05:55:41 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 05:55:41 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 05:55:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 240 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 102 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2774 KB; 2026-05-23 05:56:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 240 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 102 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2781 KB; 2026-05-23 05:57:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 05:45:57, To:, 2026-05-23 05:57:53, Duration (s):, 716, Events Per Second:, 0.128, Events:, 92, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 91, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13814 2026-05-23 05:57:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s701ms. 2026-05-23 05:57:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 214 KB; rules::ProcessConditionsCache: 105 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2750 KB; 2026-05-23 05:58:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 214 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2740 KB; 2026-05-23 05:59:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 215 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2749 KB; 2026-05-23 06:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 06:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:00:41 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 06:00:41 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 06:00:41 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 06:00:41 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 06:00:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 402 KB; rules::ProcessConditionsCache: 202 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 38 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3107 KB; 2026-05-23 06:01:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 406 KB; rules::ProcessConditionsCache: 218 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BaseEvent: 40 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3142 KB; 2026-05-23 06:02:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 424 KB; rules::ProcessConditionsCache: 202 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 46 KB; BaseEvent: 44 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3136 KB; 2026-05-23 06:03:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 425 KB; rules::ProcessConditionsCache: 202 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 47 KB; BaseEvent: 44 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3148 KB; 2026-05-23 06:04:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 05:57:52, To:, 2026-05-23 06:04:53, Duration (s):, 421, Events Per Second:, 1.285, Events:, 541, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 538, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 63258 2026-05-23 06:04:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s936ms. 2026-05-23 06:04:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 235 KB; rules::ProcessConditionsCache: 204 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2892 KB; 2026-05-23 06:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 06:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:05:41 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 06:05:41 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 06:05:41 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 06:05:41 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 06:05:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 236 KB; rules::ProcessConditionsCache: 204 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; cloudutils::CloudData: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2861 KB; 2026-05-23 06:06:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 236 KB; rules::ProcessConditionsCache: 204 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2864 KB; 2026-05-23 06:07:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 236 KB; rules::ProcessConditionsCache: 204 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2870 KB; 2026-05-23 06:08:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 236 KB; rules::ProcessConditionsCache: 204 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2874 KB; 2026-05-23 06:09:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 283 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2955 KB; 2026-05-23 06:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 06:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:10:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 06:10:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 06:10:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 06:10:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 06:10:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 290 KB; rules::ProcessConditionsCache: 219 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2978 KB; 2026-05-23 06:11:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 06:05:00, To:, 2026-05-23 06:11:53, Duration (s):, 413, Events Per Second:, 0.368, Events:, 152, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 151, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19864 2026-05-23 06:11:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s275ms. 2026-05-23 06:11:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 216 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2924 KB; 2026-05-23 06:12:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 247 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3034 KB; 2026-05-23 06:13:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 247 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 36 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3038 KB; 2026-05-23 06:14:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 249 KB; ModuleInfoCache: 103 KB; CacheEntry: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 21 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3046 KB; 2026-05-23 06:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 06:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:15:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 06:15:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 06:15:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 06:15:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 06:15:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 256 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 38 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 23 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3091 KB; 2026-05-23 06:16:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 345 KB; rules::ProcessConditionsCache: 269 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; TcpIpConnectionsManager: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3135 KB; 2026-05-23 06:17:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 348 KB; rules::ProcessConditionsCache: 254 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; TcpIpConnectionsManager: 44 KB; cloudutils::CloudData: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3106 KB; 2026-05-23 06:18:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 06:12:03, To:, 2026-05-23 06:18:53, Duration (s):, 410, Events Per Second:, 0.671, Events:, 275, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 274, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35690 2026-05-23 06:18:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s256ms. 2026-05-23 06:18:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 261 KB; rules::ProcessConditionsCache: 254 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; TcpIpConnectionsManager: 67 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2990 KB; 2026-05-23 06:19:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 261 KB; rules::ProcessConditionsCache: 254 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2984 KB; 2026-05-23 06:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 06:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:20:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 06:20:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 06:20:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 06:20:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 06:20:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 322 KB; ProcessInfo: 311 KB; ModuleInfoCache: 106 KB; TcpIpConnectionsManager: 90 KB; CacheEntry: 88 KB; cloudutils::CloudData: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3163 KB; 2026-05-23 06:21:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 561 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 345 KB; rules::ProcessConditionsCache: 330 KB; TcpIpConnectionsManager: 110 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3241 KB; 2026-05-23 06:22:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 353 KB; rules::ProcessConditionsCache: 269 KB; TcpIpConnectionsManager: 116 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3193 KB; 2026-05-23 06:23:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 377 KB; rules::ProcessConditionsCache: 264 KB; TcpIpConnectionsManager: 125 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; cloudutils::CloudData: 38 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3228 KB; 2026-05-23 06:24:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 377 KB; rules::ProcessConditionsCache: 260 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 38 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3194 KB; 2026-05-23 06:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 06:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:25:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 06:25:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 06:25:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 06:25:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 06:25:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 06:18:56, To:, 2026-05-23 06:25:53, Duration (s):, 417, Events Per Second:, 0.796, Events:, 332, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 331, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40859 2026-05-23 06:25:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s113ms. 2026-05-23 06:25:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 264 KB; ProcessInfo: 248 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2977 KB; 2026-05-23 06:26:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 262 KB; ProcessInfo: 248 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2952 KB; 2026-05-23 06:27:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 262 KB; ProcessInfo: 248 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; cloudutils::CloudData: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2959 KB; 2026-05-23 06:28:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 262 KB; ProcessInfo: 248 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; cloudutils::CloudData: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2984 KB; 2026-05-23 06:29:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 554 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 292 KB; ProcessInfo: 273 KB; ModuleInfoCache: 106 KB; CacheEntry: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; cloudutils::CloudData: 38 KB; TcpIpConnectionsManager: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3060 KB; 2026-05-23 06:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 06:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:30:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 06:30:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 06:30:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 06:30:42 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 06:30:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 559 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 273 KB; ModuleInfoCache: 107 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 46 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3041 KB; 2026-05-23 06:31:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 559 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 270 KB; ModuleInfoCache: 107 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 47 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3042 KB; 2026-05-23 06:32:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 06:26:32, To:, 2026-05-23 06:32:53, Duration (s):, 381, Events Per Second:, 0.262, Events:, 100, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 99, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14036 2026-05-23 06:32:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s669ms. 2026-05-23 06:32:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 559 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 271 KB; ProcessInfo: 245 KB; ModuleInfoCache: 107 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2997 KB; 2026-05-23 06:33:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 559 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 271 KB; ProcessInfo: 246 KB; ModuleInfoCache: 107 KB; CacheEntry: 89 KB; cloudutils::CloudData: 38 KB; TcpIpConnectionsManager: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2984 KB; 2026-05-23 06:34:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 559 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 269 KB; ProcessInfo: 246 KB; ModuleInfoCache: 107 KB; CacheEntry: 89 KB; cloudutils::CloudData: 38 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3002 KB; 2026-05-23 06:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 06:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:35:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 06:35:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 06:35:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 06:35:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 06:35:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 559 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 286 KB; ProcessInfo: 268 KB; ModuleInfoCache: 107 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 43 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3022 KB; 2026-05-23 06:36:57 75ed55ffc6c0 Info: Allocations: rules::AncestorEvaluations: 560 KB; ModuleMetadata: 559 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 284 KB; ModuleInfoCache: 107 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3104 KB; 2026-05-23 06:37:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 560 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 453 KB; rules::ProcessConditionsCache: 409 KB; TcpIpConnectionsManager: 131 KB; ModuleInfoCache: 109 KB; CacheEntry: 89 KB; BaseEvent: 49 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3521 KB; 2026-05-23 06:38:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 560 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 453 KB; rules::ProcessConditionsCache: 332 KB; TcpIpConnectionsManager: 118 KB; ModuleInfoCache: 109 KB; CacheEntry: 89 KB; BaseEvent: 53 KB; cloudutils::CloudData: 39 KB; ProcessInfoCommandLineTag: 25 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3418 KB; 2026-05-23 06:39:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 06:33:09, To:, 2026-05-23 06:39:53, Duration (s):, 404, Events Per Second:, 1.789, Events:, 723, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 694, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 14, Livegrid:, 14, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 87220 2026-05-23 06:39:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s796ms. 2026-05-23 06:39:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 560 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 430 KB; rules::ProcessConditionsCache: 357 KB; ModuleInfoCache: 109 KB; TcpIpConnectionsManager: 100 KB; CacheEntry: 89 KB; cloudutils::CloudData: 39 KB; ProcessInfoCommandLineTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3337 KB; 2026-05-23 06:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 06:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:40:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 06:40:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 06:40:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 06:40:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 06:40:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 560 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 434 KB; rules::ProcessConditionsCache: 346 KB; ModuleInfoCache: 109 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 39 KB; ProcessInfoCommandLineTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3330 KB; 2026-05-23 06:41:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 560 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 436 KB; rules::ProcessConditionsCache: 346 KB; ModuleInfoCache: 109 KB; CacheEntry: 89 KB; TcpIpConnectionsManager: 43 KB; cloudutils::CloudData: 39 KB; ProcessInfoCommandLineTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3313 KB; 2026-05-23 06:42:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 560 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 437 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 109 KB; CacheEntry: 89 KB; cloudutils::CloudData: 39 KB; ProcessInfoCommandLineTag: 31 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3291 KB; 2026-05-23 06:43:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 560 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 440 KB; rules::ProcessConditionsCache: 346 KB; ModuleInfoCache: 109 KB; CacheEntry: 89 KB; cloudutils::CloudData: 39 KB; ProcessInfoCommandLineTag: 31 KB; TcpIpConnectionsManager: 26 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3294 KB; 2026-05-23 06:44:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 560 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 445 KB; rules::ProcessConditionsCache: 350 KB; ModuleInfoCache: 109 KB; CacheEntry: 89 KB; cloudutils::CloudData: 39 KB; ProcessInfoCommandLineTag: 31 KB; TcpIpConnectionsManager: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3305 KB; 2026-05-23 06:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 06:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:45:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 06:45:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 06:45:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 06:45:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 06:45:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 450 KB; rules::ProcessConditionsCache: 352 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; cloudutils::CloudData: 39 KB; TcpIpConnectionsManager: 33 KB; ProcessInfoCommandLineTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3313 KB; 2026-05-23 06:46:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 06:39:46, To:, 2026-05-23 06:46:53, Duration (s):, 427, Events Per Second:, 0.166, Events:, 71, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 70, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 11678 2026-05-23 06:46:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s519ms. 2026-05-23 06:46:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 350 KB; ProcessInfo: 221 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; cloudutils::CloudData: 39 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3037 KB; 2026-05-23 06:47:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 350 KB; ProcessInfo: 221 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3039 KB; 2026-05-23 06:48:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 350 KB; ProcessInfo: 221 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3039 KB; 2026-05-23 06:49:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 350 KB; ProcessInfo: 221 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3045 KB; 2026-05-23 06:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 06:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:50:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 06:50:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 06:50:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 06:50:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 06:50:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 381 KB; ProcessInfo: 226 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3092 KB; 2026-05-23 06:51:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 381 KB; ProcessInfo: 226 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3118 KB; 2026-05-23 06:52:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 383 KB; ProcessInfo: 227 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3130 KB; 2026-05-23 06:53:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 06:50:12, To:, 2026-05-23 06:53:53, Duration (s):, 221, Events Per Second:, 0.140, Events:, 31, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 20, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 4781 2026-05-23 06:53:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s984ms. 2026-05-23 06:53:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 383 KB; ProcessInfo: 212 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 38 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3108 KB; 2026-05-23 06:54:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 235 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 38 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2772 KB; 2026-05-23 06:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 06:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 06:55:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 06:55:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 06:55:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 06:55:43 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 06:55:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 210 KB; TcpIpConnectionsManager: 144 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; cloudutils::CloudData: 38 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3215 KB; 2026-05-23 06:56:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 324 KB; TcpIpConnectionsManager: 141 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 38 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3063 KB; 2026-05-23 06:57:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 327 KB; TcpIpConnectionsManager: 118 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 47 KB; BaseEvent: 39 KB; cloudutils::CloudData: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3003 KB; 2026-05-23 06:58:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 327 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 87 KB; rules::ProcessConditionsCache: 43 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2977 KB; 2026-05-23 06:59:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 565 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 330 KB; ModuleInfoCache: 109 KB; CacheEntry: 90 KB; BaseEvent: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::ProcessConditionsCache: 45 KB; cloudutils::CloudData: 38 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2952 KB; 2026-05-23 07:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 07:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:00:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 07:00:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 07:00:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 07:00:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 07:00:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 06:54:10, To:, 2026-05-23 07:00:53, Duration (s):, 403, Events Per Second:, 1.114, Events:, 449, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 368, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 39, Livegrid:, 39, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52617 2026-05-23 07:00:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s328ms. 2026-05-23 07:00:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 245 KB; ModuleInfoCache: 110 KB; rules::ProcessConditionsCache: 97 KB; CacheEntry: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; cloudutils::CloudData: 39 KB; TcpIpConnectionsManager: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2863 KB; 2026-05-23 07:01:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 246 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 66 KB; cloudutils::CloudData: 39 KB; TcpIpConnectionsManager: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2811 KB; 2026-05-23 07:02:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 246 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 66 KB; cloudutils::CloudData: 39 KB; TcpIpConnectionsManager: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2815 KB; 2026-05-23 07:03:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 246 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 66 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2814 KB; 2026-05-23 07:04:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 246 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2813 KB; 2026-05-23 07:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 07:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:05:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 07:05:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 07:05:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 07:05:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 07:05:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 249 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2809 KB; 2026-05-23 07:06:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 249 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2815 KB; 2026-05-23 07:07:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 07:00:53, To:, 2026-05-23 07:07:53, Duration (s):, 420, Events Per Second:, 0.086, Events:, 36, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 35, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 6488 2026-05-23 07:07:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s783ms. 2026-05-23 07:07:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 214 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2774 KB; 2026-05-23 07:08:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 214 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 2784 KB; 2026-05-23 07:09:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 377 KB; rules::ProcessConditionsCache: 376 KB; TcpIpConnectionsManager: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 126 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; BaseEvent: 76 KB; cloudutils::CloudData: 39 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3580 KB; 2026-05-23 07:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 07:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:10:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 07:10:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 07:10:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 07:10:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 07:10:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 381 KB; rules::ProcessConditionsCache: 269 KB; TcpIpConnectionsManager: 148 KB; ModuleInfoCache: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 106 KB; CacheEntry: 90 KB; BaseEvent: 81 KB; cloudutils::CloudData: 39 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3462 KB; 2026-05-23 07:11:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 381 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 137 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; BaseEvent: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 39 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3286 KB; 2026-05-23 07:12:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 381 KB; TcpIpConnectionsManager: 133 KB; ModuleInfoCache: 110 KB; BaseEvent: 91 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 85 KB; cloudutils::CloudData: 39 KB; BatchSerializer::EventsQueueTag: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3186 KB; 2026-05-23 07:13:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 446 KB; rules::ProcessConditionsCache: 135 KB; BaseEvent: 117 KB; ModuleInfoCache: 110 KB; TcpIpConnectionsManager: 103 KB; CacheEntry: 90 KB; BatchSerializer::EventsQueueTag: 42 KB; cloudutils::CloudData: 39 KB; ProcessInfoCommandLineTag: 24 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3316 KB; 2026-05-23 07:14:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 07:07:47, To:, 2026-05-23 07:14:53, Duration (s):, 426, Events Per Second:, 1.974, Events:, 841, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 616, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 112, Livegrid:, 112, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 92815 2026-05-23 07:14:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s829ms. 2026-05-23 07:14:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 568 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 119 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2929 KB; 2026-05-23 07:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 07:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:15:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 07:15:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 07:15:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 07:15:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 07:15:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 119 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; cloudutils::CloudData: 39 KB; TcpIpConnectionsManager: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2906 KB; 2026-05-23 07:16:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 119 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; cloudutils::CloudData: 39 KB; TcpIpConnectionsManager: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2918 KB; 2026-05-23 07:17:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 334 KB; rules::ProcessConditionsCache: 191 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3066 KB; 2026-05-23 07:18:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 336 KB; rules::ProcessConditionsCache: 119 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2972 KB; 2026-05-23 07:19:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 336 KB; rules::ProcessConditionsCache: 119 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2972 KB; 2026-05-23 07:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 07:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:20:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 07:20:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 07:20:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 07:20:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 07:20:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 128 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2998 KB; 2026-05-23 07:21:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 07:15:00, To:, 2026-05-23 07:21:53, Duration (s):, 413, Events Per Second:, 0.557, Events:, 230, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 229, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30195 2026-05-23 07:21:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s471ms. 2026-05-23 07:21:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 274 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2989 KB; 2026-05-23 07:22:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 274 KB; rules::ProcessConditionsCache: 128 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2932 KB; 2026-05-23 07:23:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 276 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 82 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2943 KB; 2026-05-23 07:24:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 277 KB; rules::ProcessConditionsCache: 128 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 41 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2912 KB; 2026-05-23 07:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 07:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:25:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 07:25:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 07:25:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 07:25:44 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 07:25:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 308 KB; rules::ProcessConditionsCache: 132 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2958 KB; 2026-05-23 07:26:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 137 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 80 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3014 KB; 2026-05-23 07:27:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 130 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 77 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3009 KB; 2026-05-23 07:28:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 07:21:53, To:, 2026-05-23 07:28:53, Duration (s):, 420, Events Per Second:, 0.583, Events:, 245, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 192, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31398 2026-05-23 07:28:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s706ms. 2026-05-23 07:28:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 242 KB; rules::ProcessConditionsCache: 133 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2872 KB; 2026-05-23 07:29:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 570 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 245 KB; rules::ProcessConditionsCache: 139 KB; ModuleInfoCache: 110 KB; CacheEntry: 90 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2870 KB; 2026-05-23 07:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 07:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:30:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 07:30:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 07:30:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 07:30:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 07:30:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 573 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 254 KB; rules::ProcessConditionsCache: 144 KB; ModuleInfoCache: 110 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2894 KB; 2026-05-23 07:31:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 573 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 254 KB; rules::ProcessConditionsCache: 144 KB; ModuleInfoCache: 110 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2898 KB; 2026-05-23 07:32:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 573 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 254 KB; rules::ProcessConditionsCache: 141 KB; ModuleInfoCache: 110 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2898 KB; 2026-05-23 07:33:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 573 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 146 KB; ModuleInfoCache: 110 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2909 KB; 2026-05-23 07:34:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 573 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 146 KB; ModuleInfoCache: 110 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2911 KB; 2026-05-23 07:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 07:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:35:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 07:35:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 07:35:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 07:35:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 07:35:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 07:29:45, To:, 2026-05-23 07:35:53, Duration (s):, 368, Events Per Second:, 0.242, Events:, 89, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 86, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15339 2026-05-23 07:35:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s701ms. 2026-05-23 07:35:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 573 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 238 KB; ModuleInfoCache: 110 KB; CacheEntry: 91 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3045 KB; 2026-05-23 07:36:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 573 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 148 KB; ModuleInfoCache: 110 KB; CacheEntry: 91 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2936 KB; 2026-05-23 07:37:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 573 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 157 KB; TcpIpConnectionsManager: 110 KB; ModuleInfoCache: 110 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3027 KB; 2026-05-23 07:38:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 575 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 152 KB; TcpIpConnectionsManager: 120 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3059 KB; 2026-05-23 07:39:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 575 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 152 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3019 KB; 2026-05-23 07:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 07:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:40:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 07:40:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 07:40:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 07:40:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 07:40:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 575 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 152 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; TcpIpConnectionsManager: 38 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2989 KB; 2026-05-23 07:41:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 575 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 152 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2975 KB; 2026-05-23 07:42:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 07:35:50, To:, 2026-05-23 07:42:53, Duration (s):, 423, Events Per Second:, 0.515, Events:, 218, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 211, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30100 2026-05-23 07:42:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s557ms. 2026-05-23 07:42:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 575 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 215 KB; rules::ProcessConditionsCache: 153 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2838 KB; 2026-05-23 07:43:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 575 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 301 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 46 KB; cloudutils::CloudData: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3018 KB; 2026-05-23 07:44:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 575 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; TcpIpConnectionsManager: 47 KB; cloudutils::CloudData: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3026 KB; 2026-05-23 07:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 07:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:45:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 07:45:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 07:45:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 07:45:45 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 07:45:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 162 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 47 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3040 KB; 2026-05-23 07:46:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 162 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3019 KB; 2026-05-23 07:47:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 308 KB; rules::ProcessConditionsCache: 170 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3064 KB; 2026-05-23 07:48:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 308 KB; rules::ProcessConditionsCache: 164 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3050 KB; 2026-05-23 07:49:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 07:38:42, To:, 2026-05-23 07:49:53, Duration (s):, 671, Events Per Second:, 0.377, Events:, 253, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 252, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32993 2026-05-23 07:49:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s623ms. 2026-05-23 07:49:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 215 KB; rules::ProcessConditionsCache: 163 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2918 KB; 2026-05-23 07:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 07:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:50:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 07:50:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 07:50:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 07:50:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 07:50:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 229 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2931 KB; 2026-05-23 07:51:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 254 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2976 KB; 2026-05-23 07:52:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 254 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2978 KB; 2026-05-23 07:53:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 255 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2974 KB; 2026-05-23 07:54:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 560 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 255 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2967 KB; 2026-05-23 07:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 07:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 07:55:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 07:55:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 07:55:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 07:55:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 07:55:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 178 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2987 KB; 2026-05-23 07:56:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 07:50:03, To:, 2026-05-23 07:56:53, Duration (s):, 410, Events Per Second:, 0.315, Events:, 129, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 128, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17653 2026-05-23 07:56:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s692ms. 2026-05-23 07:56:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 221 KB; rules::ProcessConditionsCache: 172 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2918 KB; 2026-05-23 07:57:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 221 KB; rules::ProcessConditionsCache: 172 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2920 KB; 2026-05-23 07:58:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 221 KB; rules::ProcessConditionsCache: 172 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2922 KB; 2026-05-23 07:59:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 221 KB; rules::ProcessConditionsCache: 172 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2926 KB; 2026-05-23 08:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 08:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:00:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 08:00:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 08:00:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 08:00:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 08:00:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 242 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2983 KB; 2026-05-23 08:01:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 242 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2988 KB; 2026-05-23 08:02:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 242 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2996 KB; 2026-05-23 08:03:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 07:59:51, To:, 2026-05-23 08:03:53, Duration (s):, 242, Events Per Second:, 0.211, Events:, 51, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 50, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8594 2026-05-23 08:03:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s662ms. 2026-05-23 08:03:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 215 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2972 KB; 2026-05-23 08:04:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 240 KB; rules::ProcessConditionsCache: 195 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2977 KB; 2026-05-23 08:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 08:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:05:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 08:05:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 08:05:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 08:05:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 08:05:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 245 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2999 KB; 2026-05-23 08:06:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 245 KB; rules::ProcessConditionsCache: 195 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3002 KB; 2026-05-23 08:07:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 259 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3122 KB; 2026-05-23 08:08:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 195 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3020 KB; 2026-05-23 08:09:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 199 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 41 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3100 KB; 2026-05-23 08:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 08:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:10:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 08:10:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 08:10:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 08:10:46 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 08:10:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 08:03:52, To:, 2026-05-23 08:10:53, Duration (s):, 421, Events Per Second:, 0.753, Events:, 317, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 316, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39373 2026-05-23 08:10:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s973ms. 2026-05-23 08:10:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 206 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 47 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3028 KB; 2026-05-23 08:11:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 204 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3009 KB; 2026-05-23 08:12:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 336 KB; rules::ProcessConditionsCache: 287 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3194 KB; 2026-05-23 08:13:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 389 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 41 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3235 KB; 2026-05-23 08:14:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 585 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 392 KB; rules::ProcessConditionsCache: 235 KB; ModuleInfoCache: 112 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 41 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3228 KB; 2026-05-23 08:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 08:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:15:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 08:15:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 08:15:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 08:15:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 08:15:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 395 KB; rules::ProcessConditionsCache: 239 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 41 KB; BaseEvent: 25 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3241 KB; 2026-05-23 08:16:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 399 KB; rules::ProcessConditionsCache: 239 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; BaseEvent: 32 KB; TcpIpConnectionsManager: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 22 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3212 KB; 2026-05-23 08:17:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 08:10:56, To:, 2026-05-23 08:17:53, Duration (s):, 417, Events Per Second:, 0.722, Events:, 301, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 300, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38142 2026-05-23 08:17:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s622ms. 2026-05-23 08:17:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 244 KB; ProcessInfo: 227 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2986 KB; 2026-05-23 08:18:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 246 KB; ProcessInfo: 230 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3000 KB; 2026-05-23 08:19:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 242 KB; ProcessInfo: 232 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3014 KB; 2026-05-23 08:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 08:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:20:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 08:20:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 08:20:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 08:20:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 08:20:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 253 KB; ProcessInfo: 251 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3040 KB; 2026-05-23 08:21:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 251 KB; rules::ProcessConditionsCache: 248 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3040 KB; 2026-05-23 08:22:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 270 KB; ProcessInfo: 264 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3086 KB; 2026-05-23 08:23:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::RuleEvaluationCtx: 488 KB; rules::ProcessConditionsCache: 373 KB; ProcessInfo: 315 KB; ModuleInfoCache: 113 KB; TcpIpConnectionsManager: 97 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3313 KB; 2026-05-23 08:24:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 08:18:42, To:, 2026-05-23 08:24:53, Duration (s):, 371, Events Per Second:, 0.631, Events:, 234, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 233, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29140 2026-05-23 08:24:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s695ms. 2026-05-23 08:24:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; TcpIpConnectionsManager: 95 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3114 KB; 2026-05-23 08:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 08:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:25:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 08:25:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 08:25:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 08:25:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 08:25:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 307 KB; TcpIpConnectionsManager: 120 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3222 KB; 2026-05-23 08:26:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 250 KB; ModuleInfoCache: 113 KB; TcpIpConnectionsManager: 100 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3143 KB; 2026-05-23 08:27:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 250 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3111 KB; 2026-05-23 08:28:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3130 KB; 2026-05-23 08:29:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 593 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::RuleEvaluationCtx: 488 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3121 KB; 2026-05-23 08:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 08:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:30:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 08:30:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 08:30:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 08:30:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 08:30:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 259 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 39 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3185 KB; 2026-05-23 08:31:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 08:24:54, To:, 2026-05-23 08:31:53, Duration (s):, 419, Events Per Second:, 0.520, Events:, 218, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 217, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29282 2026-05-23 08:31:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s686ms. 2026-05-23 08:31:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 266 KB; ProcessInfo: 249 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3080 KB; 2026-05-23 08:32:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 274 KB; ProcessInfo: 261 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3117 KB; 2026-05-23 08:33:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 560 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 262 KB; rules::ProcessConditionsCache: 261 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3124 KB; 2026-05-23 08:34:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 560 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 263 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3117 KB; 2026-05-23 08:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 08:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:35:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 08:35:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 08:35:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 08:35:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 08:35:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 561 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 266 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3108 KB; 2026-05-23 08:36:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 263 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3085 KB; 2026-05-23 08:37:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 271 KB; rules::ProcessConditionsCache: 263 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3092 KB; 2026-05-23 08:38:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 08:31:54, To:, 2026-05-23 08:38:53, Duration (s):, 419, Events Per Second:, 0.162, Events:, 68, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 67, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 10551 2026-05-23 08:38:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s622ms. 2026-05-23 08:38:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 266 KB; ProcessInfo: 217 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3033 KB; 2026-05-23 08:39:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 268 KB; ProcessInfo: 264 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3109 KB; 2026-05-23 08:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 08:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:40:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 08:40:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 08:40:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 08:40:47 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 08:40:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 275 KB; ProcessInfo: 270 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3125 KB; 2026-05-23 08:41:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 275 KB; ProcessInfo: 271 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3129 KB; 2026-05-23 08:42:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 277 KB; ProcessInfo: 276 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3142 KB; 2026-05-23 08:43:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 275 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3124 KB; 2026-05-23 08:44:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 595 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 275 KB; ModuleInfoCache: 113 KB; CacheEntry: 96 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3148 KB; 2026-05-23 08:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 08:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:45:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 08:45:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 08:45:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 08:45:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 08:45:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 08:39:01, To:, 2026-05-23 08:45:53, Duration (s):, 412, Events Per Second:, 0.422, Events:, 174, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 173, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23343 2026-05-23 08:45:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s257ms. 2026-05-23 08:45:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 278 KB; ProcessInfo: 221 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3053 KB; 2026-05-23 08:46:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 280 KB; ProcessInfo: 224 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3064 KB; 2026-05-23 08:47:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 283 KB; ProcessInfo: 229 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3060 KB; 2026-05-23 08:48:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 283 KB; ProcessInfo: 236 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3077 KB; 2026-05-23 08:49:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 280 KB; ProcessInfo: 240 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; TcpIpConnectionsManager: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3059 KB; 2026-05-23 08:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 08:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:50:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 08:50:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 08:50:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 08:50:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 08:50:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 287 KB; ProcessInfo: 246 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; TcpIpConnectionsManager: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3072 KB; 2026-05-23 08:51:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 287 KB; ProcessInfo: 246 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3075 KB; 2026-05-23 08:52:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 08:46:47, To:, 2026-05-23 08:52:53, Duration (s):, 366, Events Per Second:, 0.257, Events:, 94, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 85, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14253 2026-05-23 08:52:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s623ms. 2026-05-23 08:52:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 289 KB; ProcessInfo: 223 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3045 KB; 2026-05-23 08:53:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 291 KB; ProcessInfo: 223 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; cloudutils::CloudData: 40 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3054 KB; 2026-05-23 08:54:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 322 KB; ProcessInfo: 235 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; cloudutils::CloudData: 40 KB; TcpIpConnectionsManager: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3116 KB; 2026-05-23 08:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 08:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 08:55:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 08:55:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 08:55:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 08:55:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 08:55:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 294 KB; ProcessInfo: 257 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3092 KB; 2026-05-23 08:56:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 318 KB; ProcessInfo: 279 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3167 KB; 2026-05-23 08:57:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 296 KB; ProcessInfo: 282 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 80 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3154 KB; 2026-05-23 08:58:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 294 KB; ProcessInfo: 283 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3134 KB; 2026-05-23 08:59:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 08:52:46, To:, 2026-05-23 08:59:53, Duration (s):, 427, Events Per Second:, 0.482, Events:, 206, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 204, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27504 2026-05-23 08:59:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s637ms. 2026-05-23 08:59:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 596 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 332 KB; ProcessInfo: 248 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3123 KB; 2026-05-23 09:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 09:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:00:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 09:00:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 09:00:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 09:00:48 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 09:00:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 456 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 72 KB; BaseEvent: 45 KB; cloudutils::CloudData: 41 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3122 KB; 2026-05-23 09:01:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 481 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 97 KB; BaseEvent: 51 KB; cloudutils::CloudData: 41 KB; rules::ProcessConditionsCache: 36 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3184 KB; 2026-05-23 09:02:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 508 KB; rules::RuleEvaluationCtx: 496 KB; TcpIpConnectionsManager: 118 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BaseEvent: 58 KB; cloudutils::CloudData: 41 KB; rules::ProcessConditionsCache: 36 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3242 KB; 2026-05-23 09:03:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 511 KB; rules::RuleEvaluationCtx: 496 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 82 KB; BaseEvent: 64 KB; cloudutils::CloudData: 41 KB; rules::ProcessConditionsCache: 36 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3225 KB; 2026-05-23 09:04:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 511 KB; rules::RuleEvaluationCtx: 496 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BaseEvent: 67 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 41 KB; rules::ProcessConditionsCache: 33 KB; BatchSerializer::EventsQueueTag: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3206 KB; 2026-05-23 09:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 09:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:05:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 09:05:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 09:05:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 09:05:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 09:05:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 496 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BaseEvent: 76 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 41 KB; rules::ProcessConditionsCache: 38 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3225 KB; 2026-05-23 09:06:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 08:59:53, To:, 2026-05-23 09:06:53, Duration (s):, 420, Events Per Second:, 1.837, Events:, 772, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 769, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 90436 2026-05-23 09:06:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s807ms. 2026-05-23 09:06:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 236 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 46 KB; cloudutils::CloudData: 41 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2808 KB; 2026-05-23 09:07:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 287 KB; rules::ProcessConditionsCache: 143 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3037 KB; 2026-05-23 09:08:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 290 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 82 KB; rules::ProcessConditionsCache: 58 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2940 KB; 2026-05-23 09:09:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 380 KB; ModuleInfoCache: 113 KB; TcpIpConnectionsManager: 105 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 47 KB; cloudutils::CloudData: 41 KB; BaseEvent: 32 KB; ProcessInfoCommandLineTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3082 KB; 2026-05-23 09:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 09:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:10:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 09:10:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 09:10:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 09:10:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 09:10:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 387 KB; ModuleInfoCache: 113 KB; TcpIpConnectionsManager: 98 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 53 KB; cloudutils::CloudData: 41 KB; BaseEvent: 35 KB; ProcessInfoCommandLineTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3100 KB; 2026-05-23 09:11:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 387 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 54 KB; rules::ProcessConditionsCache: 51 KB; cloudutils::CloudData: 41 KB; BaseEvent: 41 KB; ProcessInfoCommandLineTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3066 KB; 2026-05-23 09:12:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 411 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 55 KB; TcpIpConnectionsManager: 49 KB; BaseEvent: 49 KB; cloudutils::CloudData: 41 KB; ProcessInfoCommandLineTag: 29 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3100 KB; 2026-05-23 09:13:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 09:07:00, To:, 2026-05-23 09:13:53, Duration (s):, 413, Events Per Second:, 1.290, Events:, 533, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 532, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 65139 2026-05-23 09:13:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s819ms. 2026-05-23 09:13:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 255 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 72 KB; rules::ProcessConditionsCache: 52 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2870 KB; 2026-05-23 09:14:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 598 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 267 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 84 KB; rules::ProcessConditionsCache: 52 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2898 KB; 2026-05-23 09:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 09:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:15:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 09:15:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 09:15:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 09:15:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 09:15:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 271 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 59 KB; rules::ProcessConditionsCache: 52 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2875 KB; 2026-05-23 09:16:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 271 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 55 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2865 KB; 2026-05-23 09:17:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 283 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 63 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2885 KB; 2026-05-23 09:18:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 296 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 61 KB; TcpIpConnectionsManager: 43 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2908 KB; 2026-05-23 09:19:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 343 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 95 KB; rules::ProcessConditionsCache: 85 KB; cloudutils::CloudData: 41 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3051 KB; 2026-05-23 09:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 09:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:20:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 09:20:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 09:20:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 09:20:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 09:20:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 09:14:05, To:, 2026-05-23 09:20:53, Duration (s):, 408, Events Per Second:, 0.610, Events:, 249, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 248, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31276 2026-05-23 09:20:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s726ms. 2026-05-23 09:20:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 277 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 66 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2915 KB; 2026-05-23 09:21:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 302 KB; ModuleInfoCache: 113 KB; TcpIpConnectionsManager: 102 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 94 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2999 KB; 2026-05-23 09:22:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 302 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 66 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2932 KB; 2026-05-23 09:23:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 304 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 66 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2930 KB; 2026-05-23 09:24:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 314 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 66 KB; TcpIpConnectionsManager: 44 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2959 KB; 2026-05-23 09:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 09:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:25:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 09:25:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 09:25:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 09:25:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 09:25:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 317 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 66 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2925 KB; 2026-05-23 09:26:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 321 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 70 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2936 KB; 2026-05-23 09:27:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 09:21:17, To:, 2026-05-23 09:27:53, Duration (s):, 396, Events Per Second:, 0.321, Events:, 127, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 126, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17699 2026-05-23 09:27:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s674ms. 2026-05-23 09:27:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 218 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 71 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2797 KB; 2026-05-23 09:28:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 223 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 73 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2814 KB; 2026-05-23 09:29:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 232 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 71 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2832 KB; 2026-05-23 09:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 09:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:30:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 09:30:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 09:30:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 09:30:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 09:30:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 251 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 102 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 43 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2903 KB; 2026-05-23 09:31:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 251 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 80 KB; TcpIpConnectionsManager: 43 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2878 KB; 2026-05-23 09:32:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 251 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 80 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2876 KB; 2026-05-23 09:33:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 277 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 104 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2954 KB; 2026-05-23 09:34:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 09:28:14, To:, 2026-05-23 09:34:53, Duration (s):, 399, Events Per Second:, 0.574, Events:, 229, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 228, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32464 2026-05-23 09:34:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s503ms. 2026-05-23 09:34:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 198 KB; ModuleInfoCache: 113 KB; TcpIpConnectionsManager: 100 KB; CacheEntry: 97 KB; cloudutils::CloudData: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3082 KB; 2026-05-23 09:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 09:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:35:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 09:35:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 09:35:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 09:35:49 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 09:35:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 283 KB; ModuleInfoCache: 113 KB; TcpIpConnectionsManager: 100 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 86 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2947 KB; 2026-05-23 09:36:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 283 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 84 KB; TcpIpConnectionsManager: 80 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2932 KB; 2026-05-23 09:37:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 116 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 90 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3014 KB; 2026-05-23 09:38:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 306 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 86 KB; TcpIpConnectionsManager: 46 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2945 KB; 2026-05-23 09:39:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 353 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 88 KB; TcpIpConnectionsManager: 47 KB; cloudutils::CloudData: 41 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3022 KB; 2026-05-23 09:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 09:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:40:50 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 09:40:50 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 09:40:50 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 09:40:50 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 09:40:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 381 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 95 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 41 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3077 KB; 2026-05-23 09:41:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 09:34:53, To:, 2026-05-23 09:41:53, Duration (s):, 420, Events Per Second:, 0.869, Events:, 365, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 364, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 50896 2026-05-23 09:41:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s858ms. 2026-05-23 09:41:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 142 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3014 KB; 2026-05-23 09:42:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 304 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 96 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 2963 KB; 2026-05-23 09:43:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 305 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 96 KB; TcpIpConnectionsManager: 46 KB; cloudutils::CloudData: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2950 KB; 2026-05-23 09:44:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 600 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 306 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 98 KB; CacheEntry: 97 KB; cloudutils::CloudData: 41 KB; TcpIpConnectionsManager: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2953 KB; 2026-05-23 09:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 09:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:45:50 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 09:45:50 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 09:45:50 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 09:45:50 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 09:45:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 314 KB; ModuleInfoCache: 114 KB; rules::ProcessConditionsCache: 107 KB; CacheEntry: 97 KB; cloudutils::CloudData: 41 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2990 KB; 2026-05-23 09:46:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 314 KB; ModuleInfoCache: 114 KB; rules::ProcessConditionsCache: 107 KB; CacheEntry: 97 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; BaseEvent: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2990 KB; 2026-05-23 09:47:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 314 KB; ModuleInfoCache: 114 KB; rules::ProcessConditionsCache: 107 KB; CacheEntry: 97 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; TcpIpConnectionsManager: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2989 KB; 2026-05-23 09:48:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 09:41:53, To:, 2026-05-23 09:48:53, Duration (s):, 420, Events Per Second:, 0.269, Events:, 113, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 48, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 32, Livegrid:, 32, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15270 2026-05-23 09:48:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s626ms. 2026-05-23 09:48:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 208 KB; ModuleInfoCache: 114 KB; rules::ProcessConditionsCache: 107 KB; CacheEntry: 97 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2841 KB; 2026-05-23 09:49:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 208 KB; ModuleInfoCache: 114 KB; rules::ProcessConditionsCache: 107 KB; CacheEntry: 97 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2841 KB; 2026-05-23 09:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 09:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:50:50 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 09:50:50 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 09:50:50 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 09:50:50 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 09:50:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 220 KB; rules::ProcessConditionsCache: 120 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2872 KB; 2026-05-23 09:51:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 251 KB; rules::ProcessConditionsCache: 126 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2955 KB; 2026-05-23 09:52:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 251 KB; rules::ProcessConditionsCache: 126 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2962 KB; 2026-05-23 09:53:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 284 KB; rules::ProcessConditionsCache: 164 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 77 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3057 KB; 2026-05-23 09:54:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 284 KB; rules::ProcessConditionsCache: 126 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2988 KB; 2026-05-23 09:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 09:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 09:55:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 09:55:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 09:55:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 09:55:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 09:55:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 09:45:54, To:, 2026-05-23 09:55:53, Duration (s):, 599, Events Per Second:, 0.387, Events:, 232, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 231, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29602 2026-05-23 09:55:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s626ms. 2026-05-23 09:55:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 257 KB; rules::ProcessConditionsCache: 134 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2942 KB; 2026-05-23 09:56:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 261 KB; rules::ProcessConditionsCache: 132 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2933 KB; 2026-05-23 09:57:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 134 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2937 KB; 2026-05-23 09:58:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 129 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2926 KB; 2026-05-23 09:59:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 603 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 129 KB; ModuleInfoCache: 114 KB; CacheEntry: 97 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2927 KB; 2026-05-23 10:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 10:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:00:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 10:00:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 10:00:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 10:00:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 10:00:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3019 KB; 2026-05-23 10:01:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3001 KB; 2026-05-23 10:02:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 09:56:00, To:, 2026-05-23 10:02:53, Duration (s):, 413, Events Per Second:, 0.254, Events:, 105, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 104, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16205 2026-05-23 10:02:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s633ms. 2026-05-23 10:02:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 240 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2925 KB; 2026-05-23 10:03:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2969 KB; 2026-05-23 10:04:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2956 KB; 2026-05-23 10:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 10:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:05:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 10:05:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 10:05:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 10:05:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 10:05:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 262 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2948 KB; 2026-05-23 10:06:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 262 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2979 KB; 2026-05-23 10:07:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 262 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 2984 KB; 2026-05-23 10:08:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 262 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2988 KB; 2026-05-23 10:09:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 10:03:16, To:, 2026-05-23 10:09:53, Duration (s):, 397, Events Per Second:, 0.441, Events:, 175, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 174, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23083 2026-05-23 10:09:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s678ms. 2026-05-23 10:09:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 252 KB; rules::ProcessConditionsCache: 161 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2983 KB; 2026-05-23 10:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 10:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:10:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 10:10:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 10:10:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 10:10:51 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 10:10:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 219 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3139 KB; 2026-05-23 10:11:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 238 KB; ModuleInfoCache: 114 KB; TcpIpConnectionsManager: 100 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3215 KB; 2026-05-23 10:12:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 114 KB; TcpIpConnectionsManager: 102 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3122 KB; 2026-05-23 10:13:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; TcpIpConnectionsManager: 67 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3097 KB; 2026-05-23 10:14:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 175 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 42 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3158 KB; 2026-05-23 10:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 10:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:15:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 10:15:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 10:15:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 10:15:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 10:15:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 177 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 42 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3133 KB; 2026-05-23 10:16:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 10:09:45, To:, 2026-05-23 10:16:53, Duration (s):, 428, Events Per Second:, 0.701, Events:, 300, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 294, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36692 2026-05-23 10:16:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s673ms. 2026-05-23 10:16:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 240 KB; rules::ProcessConditionsCache: 176 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2956 KB; 2026-05-23 10:17:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 243 KB; rules::ProcessConditionsCache: 178 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2940 KB; 2026-05-23 10:18:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 243 KB; rules::ProcessConditionsCache: 178 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2945 KB; 2026-05-23 10:19:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 235 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3110 KB; 2026-05-23 10:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 10:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:20:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 10:20:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 10:20:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 10:20:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 10:20:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 185 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3061 KB; 2026-05-23 10:21:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 301 KB; rules::ProcessConditionsCache: 185 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; TcpIpConnectionsManager: 77 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3075 KB; 2026-05-23 10:22:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 185 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3068 KB; 2026-05-23 10:23:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 10:17:01, To:, 2026-05-23 10:23:53, Duration (s):, 412, Events Per Second:, 0.480, Events:, 198, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 197, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25351 2026-05-23 10:23:53 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s637ms. 2026-05-23 10:23:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 229 KB; rules::ProcessConditionsCache: 189 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; TcpIpConnectionsManager: 43 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2951 KB; 2026-05-23 10:24:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 229 KB; rules::ProcessConditionsCache: 182 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 2939 KB; 2026-05-23 10:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 10:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:25:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 10:25:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 10:25:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 10:25:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 10:25:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 239 KB; rules::ProcessConditionsCache: 189 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 2946 KB; 2026-05-23 10:26:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 240 KB; rules::ProcessConditionsCache: 189 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2948 KB; 2026-05-23 10:27:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 240 KB; rules::ProcessConditionsCache: 189 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 26 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2952 KB; 2026-05-23 10:28:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 240 KB; rules::ProcessConditionsCache: 189 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 2952 KB; 2026-05-23 10:29:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 606 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 254 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 114 KB; CacheEntry: 98 KB; cloudutils::CloudData: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3024 KB; 2026-05-23 10:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 10:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:30:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 10:30:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 10:30:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 10:30:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 10:30:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 10:23:53, To:, 2026-05-23 10:30:53, Duration (s):, 420, Events Per Second:, 0.390, Events:, 164, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 163, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25543 2026-05-23 10:30:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s742ms. 2026-05-23 10:30:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 294 KB; ProcessInfo: 273 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3182 KB; 2026-05-23 10:31:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 299 KB; TcpIpConnectionsManager: 118 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3268 KB; 2026-05-23 10:32:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 314 KB; rules::ProcessConditionsCache: 268 KB; TcpIpConnectionsManager: 121 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; cloudutils::CloudData: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3247 KB; 2026-05-23 10:33:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 321 KB; TcpIpConnectionsManager: 149 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3402 KB; 2026-05-23 10:34:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 373 KB; rules::ProcessConditionsCache: 257 KB; TcpIpConnectionsManager: 126 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; cloudutils::CloudData: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3335 KB; 2026-05-23 10:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 10:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:35:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 10:35:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 10:35:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 10:35:52 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 10:35:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 399 KB; rules::ProcessConditionsCache: 242 KB; TcpIpConnectionsManager: 134 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; cloudutils::CloudData: 43 KB; BaseEvent: 37 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3338 KB; 2026-05-23 10:36:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 453 KB; rules::ProcessConditionsCache: 310 KB; TcpIpConnectionsManager: 161 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; cloudutils::CloudData: 43 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3557 KB; 2026-05-23 10:37:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 10:30:53, To:, 2026-05-23 10:37:53, Duration (s):, 420, Events Per Second:, 1.252, Events:, 526, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 525, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 65559 2026-05-23 10:37:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s312ms. 2026-05-23 10:37:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 240 KB; TcpIpConnectionsManager: 126 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; cloudutils::CloudData: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3193 KB; 2026-05-23 10:38:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 244 KB; ModuleInfoCache: 115 KB; TcpIpConnectionsManager: 100 KB; CacheEntry: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3190 KB; 2026-05-23 10:39:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 377 KB; rules::ProcessConditionsCache: 216 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 43 KB; ProcessInfoCommandLineTag: 24 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3228 KB; 2026-05-23 10:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 10:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:40:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 10:40:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 10:40:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 10:40:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 10:40:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 405 KB; rules::ProcessConditionsCache: 227 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 43 KB; BaseEvent: 31 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3258 KB; 2026-05-23 10:41:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 439 KB; rules::ProcessConditionsCache: 279 KB; ModuleInfoCache: 115 KB; TcpIpConnectionsManager: 103 KB; CacheEntry: 99 KB; cloudutils::CloudData: 43 KB; BaseEvent: 36 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3389 KB; 2026-05-23 10:42:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 439 KB; rules::ProcessConditionsCache: 222 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 43 KB; BaseEvent: 42 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3314 KB; 2026-05-23 10:43:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 449 KB; rules::ProcessConditionsCache: 222 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; TcpIpConnectionsManager: 72 KB; BaseEvent: 47 KB; cloudutils::CloudData: 43 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3319 KB; 2026-05-23 10:44:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 10:38:10, To:, 2026-05-23 10:44:53, Duration (s):, 403, Events Per Second:, 1.153, Events:, 465, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 464, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 60653 2026-05-23 10:44:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s771ms. 2026-05-23 10:44:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 612 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 292 KB; ModuleInfoCache: 115 KB; TcpIpConnectionsManager: 102 KB; CacheEntry: 99 KB; cloudutils::CloudData: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3224 KB; 2026-05-23 10:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 10:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:45:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 10:45:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 10:45:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 10:45:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 10:45:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 614 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 259 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3216 KB; 2026-05-23 10:46:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 614 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 262 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; TcpIpConnectionsManager: 77 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3216 KB; 2026-05-23 10:47:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 614 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 396 KB; rules::ProcessConditionsCache: 295 KB; TcpIpConnectionsManager: 116 KB; ModuleInfoCache: 115 KB; CacheEntry: 99 KB; cloudutils::CloudData: 43 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3356 KB; 2026-05-23 10:48:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 617 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 478 KB; rules::ProcessConditionsCache: 321 KB; ModuleInfoCache: 116 KB; CacheEntry: 99 KB; TcpIpConnectionsManager: 75 KB; BaseEvent: 56 KB; cloudutils::CloudData: 42 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3468 KB; 2026-05-23 10:49:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 618 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 478 KB; rules::ProcessConditionsCache: 321 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 75 KB; BaseEvent: 57 KB; cloudutils::CloudData: 42 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3473 KB; 2026-05-23 10:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 10:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:50:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 10:50:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 10:50:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 10:50:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 10:50:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 618 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; ProcessInfo: 478 KB; rules::ProcessConditionsCache: 321 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; BaseEvent: 62 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 36 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3440 KB; 2026-05-23 10:51:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 10:44:43, To:, 2026-05-23 10:51:53, Duration (s):, 430, Events Per Second:, 1.283, Events:, 552, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 535, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 8, Livegrid:, 8, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67900 2026-05-23 10:51:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s304ms. 2026-05-23 10:51:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 618 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 220 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3072 KB; 2026-05-23 10:52:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 618 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 220 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3072 KB; 2026-05-23 10:53:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 618 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::RuleEvaluationCtx: 496 KB; rules::ProcessConditionsCache: 328 KB; ProcessInfo: 317 KB; ModuleInfoCache: 116 KB; TcpIpConnectionsManager: 102 KB; CacheEntry: 100 KB; cloudutils::CloudData: 42 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3308 KB; 2026-05-23 10:54:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 618 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::RuleEvaluationCtx: 497 KB; rules::ProcessConditionsCache: 330 KB; ProcessInfo: 320 KB; ModuleInfoCache: 116 KB; TcpIpConnectionsManager: 103 KB; CacheEntry: 100 KB; cloudutils::CloudData: 42 KB; BaseEvent: 26 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3322 KB; 2026-05-23 10:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 10:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 10:55:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 10:55:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 10:55:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 10:55:53 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 10:55:57 75ed55ffc6c0 Info: Allocations: ModuleMetadata: 620 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 497 KB; rules::ProcessConditionsCache: 335 KB; ProcessInfo: 324 KB; ModuleInfoCache: 116 KB; TcpIpConnectionsManager: 105 KB; CacheEntry: 100 KB; cloudutils::CloudData: 42 KB; BaseEvent: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3343 KB; 2026-05-23 10:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 881 KB; ModuleMetadata: 620 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 370 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 90 KB; TcpIpConnectionsManager: 77 KB; cloudutils::CloudData: 42 KB; BaseEvent: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3515 KB; 2026-05-23 10:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 881 KB; ModuleMetadata: 620 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 373 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 42 KB; BaseEvent: 39 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3454 KB; 2026-05-23 10:58:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 10:48:32, To:, 2026-05-23 10:58:53, Duration (s):, 621, Events Per Second:, 0.689, Events:, 428, File:, 3, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 418, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 4, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51652 2026-05-23 10:58:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s818ms. 2026-05-23 10:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 881 KB; ModuleMetadata: 620 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; ProcessInfo: 270 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 42 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3319 KB; 2026-05-23 10:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 881 KB; ModuleMetadata: 620 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 293 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 42 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3326 KB; 2026-05-23 11:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 11:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:00:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 11:00:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 11:00:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 11:00:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 11:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 621 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 336 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 74 KB; rules::ProcessConditionsCache: 63 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3424 KB; 2026-05-23 11:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 621 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 336 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 74 KB; rules::ProcessConditionsCache: 61 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3429 KB; 2026-05-23 11:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 621 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 337 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 61 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 42 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3418 KB; 2026-05-23 11:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 621 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 337 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 61 KB; cloudutils::CloudData: 42 KB; BaseEvent: 27 KB; TcpIpConnectionsManager: 24 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3407 KB; 2026-05-23 11:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 621 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 351 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 38 KB; BaseEvent: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3453 KB; 2026-05-23 11:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 11:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:05:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 10:58:58, To:, 2026-05-23 11:05:53, Duration (s):, 415, Events Per Second:, 0.523, Events:, 217, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 216, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28758 2026-05-23 11:05:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 11:05:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 11:05:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 11:05:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 11:05:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s350ms. 2026-05-23 11:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 621 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 235 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 62 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3253 KB; 2026-05-23 11:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 621 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 236 KB; ModuleInfoCache: 116 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 62 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3266 KB; 2026-05-23 11:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 625 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 245 KB; ModuleInfoCache: 117 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 66 KB; cloudutils::CloudData: 43 KB; TcpIpConnectionsManager: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3292 KB; 2026-05-23 11:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 625 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 267 KB; ModuleInfoCache: 117 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 68 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3337 KB; 2026-05-23 11:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 625 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 320 KB; ModuleInfoCache: 117 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 75 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3430 KB; 2026-05-23 11:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 11:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:10:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 11:10:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 11:10:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 11:10:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 11:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 625 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 330 KB; ModuleInfoCache: 117 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 75 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 43 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3440 KB; 2026-05-23 11:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 625 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 361 KB; rules::ProcessConditionsCache: 117 KB; ModuleInfoCache: 117 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 43 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3538 KB; 2026-05-23 11:12:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 11:06:25, To:, 2026-05-23 11:12:53, Duration (s):, 388, Events Per Second:, 0.958, Events:, 372, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 359, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46668 2026-05-23 11:12:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s140ms. 2026-05-23 11:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 630 KB; ModuleMetadata: 625 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 284 KB; rules::ProcessConditionsCache: 137 KB; ModuleInfoCache: 117 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 90 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3531 KB; 2026-05-23 11:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 625 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 296 KB; ModuleInfoCache: 117 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 93 KB; rules::ProcessConditionsCache: 80 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3406 KB; 2026-05-23 11:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 625 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 299 KB; ModuleInfoCache: 117 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 79 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3403 KB; 2026-05-23 11:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 11:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:15:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 11:15:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 11:15:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 11:15:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 11:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 121 KB; ModuleInfoCache: 118 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3487 KB; 2026-05-23 11:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 887 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 333 KB; ModuleInfoCache: 118 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 84 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3432 KB; 2026-05-23 11:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 381 KB; ModuleInfoCache: 118 KB; TcpIpConnectionsManager: 108 KB; rules::ProcessConditionsCache: 104 KB; CacheEntry: 100 KB; cloudutils::CloudData: 42 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3601 KB; 2026-05-23 11:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 409 KB; TcpIpConnectionsManager: 128 KB; ModuleInfoCache: 118 KB; rules::ProcessConditionsCache: 113 KB; CacheEntry: 100 KB; cloudutils::CloudData: 42 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3668 KB; 2026-05-23 11:19:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 11:12:52, To:, 2026-05-23 11:19:53, Duration (s):, 421, Events Per Second:, 0.893, Events:, 376, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 375, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47024 2026-05-23 11:19:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s557ms. 2026-05-23 11:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 298 KB; ModuleInfoCache: 118 KB; TcpIpConnectionsManager: 108 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 87 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3455 KB; 2026-05-23 11:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 11:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:20:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 11:20:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 11:20:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 11:20:54 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 11:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 326 KB; rules::ProcessConditionsCache: 120 KB; ModuleInfoCache: 118 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3515 KB; 2026-05-23 11:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 326 KB; ModuleInfoCache: 118 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 91 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3457 KB; 2026-05-23 11:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 331 KB; ModuleInfoCache: 118 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 97 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3511 KB; 2026-05-23 11:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 336 KB; ModuleInfoCache: 118 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 92 KB; TcpIpConnectionsManager: 45 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3479 KB; 2026-05-23 11:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 336 KB; ModuleInfoCache: 118 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 95 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3488 KB; 2026-05-23 11:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 11:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:25:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 11:25:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 11:25:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 11:25:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 11:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 351 KB; ModuleInfoCache: 118 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 97 KB; cloudutils::CloudData: 42 KB; TcpIpConnectionsManager: 42 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3482 KB; 2026-05-23 11:26:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 11:20:02, To:, 2026-05-23 11:26:53, Duration (s):, 411, Events Per Second:, 0.501, Events:, 206, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 205, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26629 2026-05-23 11:26:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s604ms. 2026-05-23 11:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 261 KB; ModuleInfoCache: 118 KB; rules::ProcessConditionsCache: 109 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3397 KB; 2026-05-23 11:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 261 KB; ModuleInfoCache: 118 KB; CacheEntry: 100 KB; rules::ProcessConditionsCache: 96 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 3385 KB; 2026-05-23 11:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 268 KB; ModuleInfoCache: 118 KB; rules::ProcessConditionsCache: 105 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 62 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 3433 KB; 2026-05-23 11:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 626 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 280 KB; ModuleInfoCache: 118 KB; rules::ProcessConditionsCache: 109 KB; CacheEntry: 100 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3416 KB; 2026-05-23 11:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 11:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:30:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 11:30:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 11:30:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 11:30:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 11:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 287 KB; ModuleInfoCache: 120 KB; rules::ProcessConditionsCache: 105 KB; CacheEntry: 102 KB; cloudutils::CloudData: 44 KB; TcpIpConnectionsManager: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3440 KB; 2026-05-23 11:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 292 KB; ModuleInfoCache: 120 KB; rules::ProcessConditionsCache: 107 KB; CacheEntry: 102 KB; cloudutils::CloudData: 44 KB; TcpIpConnectionsManager: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3488 KB; 2026-05-23 11:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 293 KB; ModuleInfoCache: 120 KB; rules::ProcessConditionsCache: 107 KB; CacheEntry: 102 KB; cloudutils::CloudData: 44 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3483 KB; 2026-05-23 11:33:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 11:26:53, To:, 2026-05-23 11:33:53, Duration (s):, 420, Events Per Second:, 0.276, Events:, 116, File:, 7, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 100, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 8, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16883 2026-05-23 11:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 227 KB; ModuleInfoCache: 120 KB; rules::ProcessConditionsCache: 110 KB; CacheEntry: 102 KB; cloudutils::CloudData: 44 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchStringTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 3411 KB; 2026-05-23 11:34:00 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 7s160ms. 2026-05-23 11:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 229 KB; ModuleInfoCache: 120 KB; rules::ProcessConditionsCache: 112 KB; CacheEntry: 102 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3393 KB; 2026-05-23 11:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 11:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:35:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 11:35:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 11:35:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 11:35:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 11:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 150 KB; ModuleInfoCache: 120 KB; CacheEntry: 102 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3511 KB; 2026-05-23 11:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 279 KB; ModuleInfoCache: 120 KB; rules::ProcessConditionsCache: 117 KB; CacheEntry: 102 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3477 KB; 2026-05-23 11:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 128 KB; ModuleInfoCache: 120 KB; CacheEntry: 102 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3530 KB; 2026-05-23 11:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 304 KB; ModuleInfoCache: 120 KB; rules::ProcessConditionsCache: 117 KB; CacheEntry: 102 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3498 KB; 2026-05-23 11:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 348 KB; rules::ProcessConditionsCache: 121 KB; ModuleInfoCache: 120 KB; CacheEntry: 102 KB; TcpIpConnectionsManager: 47 KB; cloudutils::CloudData: 44 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3567 KB; 2026-05-23 11:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 11:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:40:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 11:34:04, To:, 2026-05-23 11:40:53, Duration (s):, 409, Events Per Second:, 0.821, Events:, 336, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 335, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41480 2026-05-23 11:40:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s947ms. 2026-05-23 11:40:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 11:40:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 11:40:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 11:40:55 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 11:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 282 KB; rules::ProcessConditionsCache: 126 KB; ModuleInfoCache: 120 KB; CacheEntry: 102 KB; cloudutils::CloudData: 44 KB; TcpIpConnectionsManager: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3445 KB; 2026-05-23 11:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 282 KB; rules::ProcessConditionsCache: 124 KB; ModuleInfoCache: 120 KB; CacheEntry: 102 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3439 KB; 2026-05-23 11:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 126 KB; ModuleInfoCache: 120 KB; CacheEntry: 102 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3491 KB; 2026-05-23 11:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 124 KB; ModuleInfoCache: 120 KB; CacheEntry: 102 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3494 KB; 2026-05-23 11:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 645 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 308 KB; rules::ProcessConditionsCache: 124 KB; ModuleInfoCache: 120 KB; CacheEntry: 102 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3499 KB; 2026-05-23 11:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 11:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:45:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 11:45:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 11:45:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 11:45:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 11:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 128 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3490 KB; 2026-05-23 11:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 128 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3492 KB; 2026-05-23 11:47:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 11:41:13, To:, 2026-05-23 11:47:53, Duration (s):, 400, Events Per Second:, 0.332, Events:, 133, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 132, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18346 2026-05-23 11:47:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s473ms. 2026-05-23 11:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 246 KB; rules::ProcessConditionsCache: 140 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3430 KB; 2026-05-23 11:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 259 KB; rules::ProcessConditionsCache: 165 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 62 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 3488 KB; 2026-05-23 11:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 259 KB; rules::ProcessConditionsCache: 132 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 62 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3496 KB; 2026-05-23 11:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 11:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:50:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 11:50:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 11:50:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 11:50:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 11:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; TcpIpConnectionsManager: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3523 KB; 2026-05-23 11:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; TcpIpConnectionsManager: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3529 KB; 2026-05-23 11:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3527 KB; 2026-05-23 11:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 267 KB; rules::ProcessConditionsCache: 171 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3537 KB; 2026-05-23 11:54:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 11:47:52, To:, 2026-05-23 11:54:53, Duration (s):, 421, Events Per Second:, 0.173, Events:, 73, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 62, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 11423 2026-05-23 11:54:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s645ms. 2026-05-23 11:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 220 KB; rules::ProcessConditionsCache: 171 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3476 KB; 2026-05-23 11:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 11:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 11:55:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 11:55:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 11:55:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 11:55:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 11:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 248 KB; rules::ProcessConditionsCache: 189 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 46 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3538 KB; 2026-05-23 11:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 293 KB; rules::ProcessConditionsCache: 224 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3653 KB; 2026-05-23 11:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 293 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 45 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3593 KB; 2026-05-23 11:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 189 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 45 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3621 KB; 2026-05-23 11:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 45 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3617 KB; 2026-05-23 12:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 12:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:00:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 12:00:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 12:00:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 12:00:56 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 12:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 515 KB; rules::ProcessConditionsCache: 271 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; BaseEvent: 91 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 45 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3976 KB; 2026-05-23 12:01:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 11:55:01, To:, 2026-05-23 12:01:53, Duration (s):, 412, Events Per Second:, 2.059, Events:, 849, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 770, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 39, Livegrid:, 39, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 95576 2026-05-23 12:01:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s774ms. 2026-05-23 12:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 442 KB; rules::ProcessConditionsCache: 271 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3798 KB; 2026-05-23 12:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 445 KB; rules::ProcessConditionsCache: 271 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3782 KB; 2026-05-23 12:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 446 KB; rules::ProcessConditionsCache: 274 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3797 KB; 2026-05-23 12:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 446 KB; rules::ProcessConditionsCache: 274 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3795 KB; 2026-05-23 12:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 12:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:05:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 12:05:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 12:05:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 12:05:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 12:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ProcessInfo: 450 KB; rules::ProcessConditionsCache: 274 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3794 KB; 2026-05-23 12:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ProcessInfo: 455 KB; rules::ProcessConditionsCache: 274 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3798 KB; 2026-05-23 12:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; ProcessInfo: 455 KB; rules::ProcessConditionsCache: 271 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3799 KB; 2026-05-23 12:08:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 12:02:50, To:, 2026-05-23 12:08:53, Duration (s):, 363, Events Per Second:, 0.121, Events:, 44, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 40, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7512 2026-05-23 12:08:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s700ms. 2026-05-23 12:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 275 KB; ProcessInfo: 229 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; cloudutils::CloudData: 45 KB; TcpIpConnectionsManager: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3562 KB; 2026-05-23 12:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 561 KB; rules::ProcessConditionsCache: 279 KB; ProcessInfo: 273 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; BaseEvent: 62 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3700 KB; 2026-05-23 12:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 12:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:10:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 12:10:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 12:10:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 12:10:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 12:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 286 KB; ProcessInfo: 279 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; BaseEvent: 63 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3721 KB; 2026-05-23 12:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 286 KB; ProcessInfo: 279 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; BaseEvent: 64 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3726 KB; 2026-05-23 12:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 561 KB; rules::ProcessConditionsCache: 286 KB; ProcessInfo: 279 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; BaseEvent: 65 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3734 KB; 2026-05-23 12:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; rules::ProcessConditionsCache: 286 KB; ProcessInfo: 282 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; BaseEvent: 65 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3715 KB; 2026-05-23 12:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 651 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 376 KB; ProcessInfo: 359 KB; ModuleInfoCache: 121 KB; CacheEntry: 103 KB; BaseEvent: 88 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 3962 KB; 2026-05-23 12:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 12:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:15:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 12:08:54, To:, 2026-05-23 12:15:53, Duration (s):, 419, Events Per Second:, 2.035, Events:, 853, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 500, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 176, Livegrid:, 176, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 89397 2026-05-23 12:15:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s085ms. 2026-05-23 12:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 376 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3870 KB; 2026-05-23 12:15:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 12:15:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 12:15:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 12:15:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 12:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 376 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3868 KB; 2026-05-23 12:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 376 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; TcpIpConnectionsManager: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3862 KB; 2026-05-23 12:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 376 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; TcpIpConnectionsManager: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3855 KB; 2026-05-23 12:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 376 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; TcpIpConnectionsManager: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3855 KB; 2026-05-23 12:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 12:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 492 KB; rules::ProcessConditionsCache: 346 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 49 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4108 KB; 2026-05-23 12:20:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 12:20:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 12:20:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 12:20:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 12:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 515 KB; rules::ProcessConditionsCache: 346 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 46 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4136 KB; 2026-05-23 12:22:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 12:15:06, To:, 2026-05-23 12:22:53, Duration (s):, 467, Events Per Second:, 1.025, Events:, 479, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 478, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58934 2026-05-23 12:22:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s846ms. 2026-05-23 12:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 433 KB; TcpIpConnectionsManager: 126 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; cloudutils::CloudData: 46 KB; rules::ProcessConditionsCache: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3768 KB; 2026-05-23 12:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 433 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 46 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3716 KB; 2026-05-23 12:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 455 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 102 KB; rules::ProcessConditionsCache: 64 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3785 KB; 2026-05-23 12:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 12:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 472 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 106 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3826 KB; 2026-05-23 12:25:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 12:25:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 12:25:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 12:25:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 12:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 503 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 100 KB; rules::ProcessConditionsCache: 62 KB; cloudutils::CloudData: 46 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3847 KB; 2026-05-23 12:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 515 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 100 KB; rules::ProcessConditionsCache: 60 KB; cloudutils::CloudData: 46 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3873 KB; 2026-05-23 12:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 519 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 92 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 46 KB; BaseEvent: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3893 KB; 2026-05-23 12:29:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 12:22:46, To:, 2026-05-23 12:29:53, Duration (s):, 427, Events Per Second:, 0.953, Events:, 407, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57453 2026-05-23 12:29:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s204ms. 2026-05-23 12:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 216 KB; TcpIpConnectionsManager: 128 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3861 KB; 2026-05-23 12:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 12:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 331 KB; ModuleInfoCache: 124 KB; TcpIpConnectionsManager: 115 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 99 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3716 KB; 2026-05-23 12:30:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 12:30:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 12:30:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 12:30:57 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 12:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 333 KB; ModuleInfoCache: 124 KB; TcpIpConnectionsManager: 116 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 77 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3699 KB; 2026-05-23 12:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 345 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 106 KB; rules::ProcessConditionsCache: 79 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3712 KB; 2026-05-23 12:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 351 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 75 KB; TcpIpConnectionsManager: 62 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3686 KB; 2026-05-23 12:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 352 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 77 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3689 KB; 2026-05-23 12:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 12:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 356 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; cloudutils::CloudData: 45 KB; TcpIpConnectionsManager: 44 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3700 KB; 2026-05-23 12:35:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 12:35:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 12:35:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 12:35:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 12:36:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 12:29:53, To:, 2026-05-23 12:36:53, Duration (s):, 420, Events Per Second:, 0.440, Events:, 185, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 182, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30865 2026-05-23 12:36:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s677ms. 2026-05-23 12:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 261 KB; ModuleInfoCache: 124 KB; rules::ProcessConditionsCache: 116 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 3611 KB; 2026-05-23 12:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 735 KB; ModuleMetadata: 678 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 261 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 62 KB; rules::ProcessConditionsCache: 58 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3611 KB; 2026-05-23 12:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 757 KB; ModuleMetadata: 678 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 264 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 62 KB; rules::ProcessConditionsCache: 61 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3645 KB; 2026-05-23 12:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 329 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 72 KB; rules::ProcessConditionsCache: 65 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3651 KB; 2026-05-23 12:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 12:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 380 KB; rules::ProcessConditionsCache: 129 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 98 KB; cloudutils::CloudData: 45 KB; BaseEvent: 30 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3816 KB; 2026-05-23 12:40:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 12:40:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 12:40:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 12:40:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 12:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 380 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 97 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 45 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3738 KB; 2026-05-23 12:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 393 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; TcpIpConnectionsManager: 93 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 45 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3759 KB; 2026-05-23 12:43:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 12:36:53, To:, 2026-05-23 12:43:53, Duration (s):, 420, Events Per Second:, 0.983, Events:, 413, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 412, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 50667 2026-05-23 12:43:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s317ms. 2026-05-23 12:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 261 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 66 KB; TcpIpConnectionsManager: 62 KB; cloudutils::CloudData: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3533 KB; 2026-05-23 12:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 262 KB; ModuleInfoCache: 124 KB; CacheEntry: 108 KB; rules::ProcessConditionsCache: 66 KB; cloudutils::CloudData: 45 KB; TcpIpConnectionsManager: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3521 KB; 2026-05-23 12:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 12:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 289 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 68 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3571 KB; 2026-05-23 12:45:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 12:45:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 12:45:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 12:45:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 12:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 295 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 68 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3589 KB; 2026-05-23 12:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 296 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 68 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3597 KB; 2026-05-23 12:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 296 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 68 KB; cloudutils::CloudData: 46 KB; TcpIpConnectionsManager: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3579 KB; 2026-05-23 12:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 143 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 64 KB; cloudutils::CloudData: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3742 KB; 2026-05-23 12:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 12:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:50:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 12:44:25, To:, 2026-05-23 12:50:53, Duration (s):, 388, Events Per Second:, 0.636, Events:, 247, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 246, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31663 2026-05-23 12:50:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s668ms. 2026-05-23 12:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 286 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 97 KB; TcpIpConnectionsManager: 87 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3616 KB; 2026-05-23 12:50:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 12:50:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 12:50:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 12:50:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 12:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 295 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 92 KB; rules::ProcessConditionsCache: 77 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3610 KB; 2026-05-23 12:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 296 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 77 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3615 KB; 2026-05-23 12:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 309 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 102 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3641 KB; 2026-05-23 12:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 323 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 80 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3634 KB; 2026-05-23 12:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 12:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 12:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 329 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 80 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3638 KB; 2026-05-23 12:55:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 12:55:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 12:55:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 12:55:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 12:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 329 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 80 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3639 KB; 2026-05-23 12:57:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 12:50:53, To:, 2026-05-23 12:57:53, Duration (s):, 420, Events Per Second:, 0.309, Events:, 130, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 129, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18507 2026-05-23 12:57:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s689ms. 2026-05-23 12:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 230 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 81 KB; cloudutils::CloudData: 46 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3498 KB; 2026-05-23 12:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 232 KB; ModuleInfoCache: 125 KB; CacheEntry: 109 KB; rules::ProcessConditionsCache: 81 KB; cloudutils::CloudData: 46 KB; TcpIpConnectionsManager: 24 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3499 KB; 2026-05-23 12:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 919 KB; ModuleMetadata: 685 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 245 KB; ModuleInfoCache: 125 KB; CacheEntry: 110 KB; rules::ProcessConditionsCache: 87 KB; cloudutils::CloudData: 46 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3540 KB; 2026-05-23 13:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 13:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 336 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 48 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3838 KB; 2026-05-23 13:00:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 13:00:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 13:00:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 13:00:58 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 13:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 425 KB; TcpIpConnectionsManager: 198 KB; BaseEvent: 162 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; cloudutils::CloudData: 48 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4600 KB; 2026-05-23 13:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; ProcessInfo: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; TcpIpConnectionsManager: 257 KB; BaseEvent: 206 KB; rules::ProcessConditionsCache: 144 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; BatchSerializer::EventsQueueTag: 57 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4550 KB; 2026-05-23 13:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; ProcessInfo: 705 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 560 KB; TcpIpConnectionsManager: 239 KB; BaseEvent: 214 KB; ModuleInfoCache: 128 KB; rules::ProcessConditionsCache: 116 KB; CacheEntry: 111 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4521 KB; 2026-05-23 13:04:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 12:58:09, To:, 2026-05-23 13:04:53, Duration (s):, 404, Events Per Second:, 3.512, Events:, 1420, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1197, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 176, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 159935 2026-05-23 13:04:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s966ms. 2026-05-23 13:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 447 KB; TcpIpConnectionsManager: 161 KB; rules::ProcessConditionsCache: 143 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3934 KB; 2026-05-23 13:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 13:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 450 KB; rules::ProcessConditionsCache: 141 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 82 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3868 KB; 2026-05-23 13:05:59 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 13:05:59 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 13:05:59 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 13:05:59 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 13:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 452 KB; rules::ProcessConditionsCache: 141 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; cloudutils::CloudData: 48 KB; TcpIpConnectionsManager: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3839 KB; 2026-05-23 13:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 453 KB; rules::ProcessConditionsCache: 141 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; cloudutils::CloudData: 48 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3832 KB; 2026-05-23 13:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 453 KB; rules::ProcessConditionsCache: 141 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; cloudutils::CloudData: 48 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3837 KB; 2026-05-23 13:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 500 KB; rules::ProcessConditionsCache: 149 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3915 KB; 2026-05-23 13:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 13:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 528 KB; rules::ProcessConditionsCache: 213 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; cloudutils::CloudData: 48 KB; TcpIpConnectionsManager: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4035 KB; 2026-05-23 13:10:59 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 13:10:59 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 13:10:59 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 13:10:59 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 13:11:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 13:04:49, To:, 2026-05-23 13:11:53, Duration (s):, 424, Events Per Second:, 0.532, Events:, 226, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 225, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29549 2026-05-23 13:11:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s665ms. 2026-05-23 13:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 164 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3709 KB; 2026-05-23 13:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 157 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 64 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 3723 KB; 2026-05-23 13:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 326 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3795 KB; 2026-05-23 13:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 326 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 128 KB; CacheEntry: 111 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3731 KB; 2026-05-23 13:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 13:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 159 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; TcpIpConnectionsManager: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3753 KB; 2026-05-23 13:16:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 13:16:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 13:16:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 13:16:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 13:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 353 KB; rules::ProcessConditionsCache: 190 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 62 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3842 KB; 2026-05-23 13:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 370 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3877 KB; 2026-05-23 13:18:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 13:11:53, To:, 2026-05-23 13:18:53, Duration (s):, 420, Events Per Second:, 0.440, Events:, 185, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 184, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24012 2026-05-23 13:18:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s672ms. 2026-05-23 13:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 264 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3690 KB; 2026-05-23 13:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 287 KB; rules::ProcessConditionsCache: 165 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 77 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3743 KB; 2026-05-23 13:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 13:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3733 KB; 2026-05-23 13:21:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 13:21:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 13:21:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 13:21:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 13:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3729 KB; 2026-05-23 13:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3714 KB; 2026-05-23 13:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3726 KB; 2026-05-23 13:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3721 KB; 2026-05-23 13:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 13:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:25:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 13:18:57, To:, 2026-05-23 13:25:53, Duration (s):, 416, Events Per Second:, 0.231, Events:, 96, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 95, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13110 2026-05-23 13:25:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s667ms. 2026-05-23 13:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 229 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3637 KB; 2026-05-23 13:26:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 13:26:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 13:26:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 13:26:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 13:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 254 KB; rules::ProcessConditionsCache: 224 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3746 KB; 2026-05-23 13:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 255 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3692 KB; 2026-05-23 13:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 255 KB; rules::ProcessConditionsCache: 172 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3689 KB; 2026-05-23 13:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 720 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 659 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 277 KB; rules::ProcessConditionsCache: 223 KB; ModuleInfoCache: 129 KB; CacheEntry: 113 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3796 KB; 2026-05-23 13:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 13:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 287 KB; rules::ProcessConditionsCache: 181 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; cloudutils::CloudData: 49 KB; TcpIpConnectionsManager: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3746 KB; 2026-05-23 13:31:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 13:31:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 13:31:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 13:31:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 13:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 287 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; cloudutils::CloudData: 49 KB; TcpIpConnectionsManager: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3755 KB; 2026-05-23 13:32:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 13:26:16, To:, 2026-05-23 13:32:53, Duration (s):, 397, Events Per Second:, 0.549, Events:, 218, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 217, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29008 2026-05-23 13:32:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s076ms. 2026-05-23 13:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 277 KB; rules::ProcessConditionsCache: 195 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3758 KB; 2026-05-23 13:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 62 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3771 KB; 2026-05-23 13:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 184 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 62 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3758 KB; 2026-05-23 13:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 13:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; cloudutils::CloudData: 49 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3748 KB; 2026-05-23 13:36:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 13:36:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 13:36:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 13:36:00 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 13:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 293 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; cloudutils::CloudData: 49 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3747 KB; 2026-05-23 13:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 234 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3891 KB; 2026-05-23 13:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 188 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3832 KB; 2026-05-23 13:39:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 13:32:53, To:, 2026-05-23 13:39:53, Duration (s):, 420, Events Per Second:, 0.666, Events:, 280, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 279, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35867 2026-05-23 13:39:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s116ms. 2026-05-23 13:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 658 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; TcpIpConnectionsManager: 67 KB; cloudutils::CloudData: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3792 KB; 2026-05-23 13:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 13:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 198 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; cloudutils::CloudData: 49 KB; TcpIpConnectionsManager: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3777 KB; 2026-05-23 13:41:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 13:41:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 13:41:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 13:41:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 13:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 196 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; cloudutils::CloudData: 49 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3765 KB; 2026-05-23 13:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 314 KB; rules::ProcessConditionsCache: 200 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3789 KB; 2026-05-23 13:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 314 KB; rules::ProcessConditionsCache: 198 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3789 KB; 2026-05-23 13:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 200 KB; ModuleInfoCache: 131 KB; CacheEntry: 114 KB; cloudutils::CloudData: 49 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3805 KB; 2026-05-23 13:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 13:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 131 KB; CacheEntry: 115 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; TcpIpConnectionsManager: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3826 KB; 2026-05-23 13:46:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 13:46:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 13:46:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 13:46:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 13:46:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 13:40:02, To:, 2026-05-23 13:46:53, Duration (s):, 411, Events Per Second:, 0.134, Events:, 55, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 52, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8431 2026-05-23 13:46:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s668ms. 2026-05-23 13:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 230 KB; rules::ProcessConditionsCache: 204 KB; ModuleInfoCache: 131 KB; CacheEntry: 115 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3710 KB; 2026-05-23 13:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 242 KB; rules::ProcessConditionsCache: 206 KB; ModuleInfoCache: 131 KB; CacheEntry: 115 KB; cloudutils::CloudData: 49 KB; TcpIpConnectionsManager: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3733 KB; 2026-05-23 13:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 242 KB; rules::ProcessConditionsCache: 206 KB; ModuleInfoCache: 131 KB; CacheEntry: 115 KB; cloudutils::CloudData: 49 KB; TcpIpConnectionsManager: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3735 KB; 2026-05-23 13:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 672 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 251 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 131 KB; CacheEntry: 115 KB; cloudutils::CloudData: 50 KB; TcpIpConnectionsManager: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3766 KB; 2026-05-23 13:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 13:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 259 KB; rules::ProcessConditionsCache: 223 KB; ModuleInfoCache: 131 KB; CacheEntry: 115 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3790 KB; 2026-05-23 13:51:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 13:51:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 13:51:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 13:51:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 13:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 259 KB; rules::ProcessConditionsCache: 223 KB; ModuleInfoCache: 131 KB; CacheEntry: 115 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3790 KB; 2026-05-23 13:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 259 KB; rules::ProcessConditionsCache: 223 KB; ModuleInfoCache: 131 KB; CacheEntry: 115 KB; cloudutils::CloudData: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3788 KB; 2026-05-23 13:53:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 13:47:09, To:, 2026-05-23 13:53:53, Duration (s):, 404, Events Per Second:, 0.376, Events:, 152, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 67, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 42, Livegrid:, 42, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17126 2026-05-23 13:53:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s730ms. 2026-05-23 13:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 224 KB; rules::ProcessConditionsCache: 223 KB; ModuleInfoCache: 131 KB; CacheEntry: 115 KB; cloudutils::CloudData: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3721 KB; 2026-05-23 13:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 224 KB; rules::ProcessConditionsCache: 223 KB; ModuleInfoCache: 131 KB; CacheEntry: 115 KB; cloudutils::CloudData: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3721 KB; 2026-05-23 13:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 13:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 13:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 387 KB; rules::ProcessConditionsCache: 310 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 92 KB; cloudutils::CloudData: 50 KB; BaseEvent: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4102 KB; 2026-05-23 13:56:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 13:56:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 13:56:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 13:56:01 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 13:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 392 KB; rules::ProcessConditionsCache: 290 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 95 KB; cloudutils::CloudData: 50 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4081 KB; 2026-05-23 13:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 392 KB; rules::ProcessConditionsCache: 284 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 50 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4078 KB; 2026-05-23 13:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 425 KB; rules::ProcessConditionsCache: 299 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 67 KB; cloudutils::CloudData: 50 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4108 KB; 2026-05-23 13:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 684 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 430 KB; rules::ProcessConditionsCache: 286 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 64 KB; cloudutils::CloudData: 50 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4104 KB; 2026-05-23 14:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 14:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:00:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 13:50:26, To:, 2026-05-23 14:00:53, Duration (s):, 627, Events Per Second:, 0.928, Events:, 582, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 579, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 71512 2026-05-23 14:00:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s176ms. 2026-05-23 14:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 309 KB; ProcessInfo: 280 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3889 KB; 2026-05-23 14:01:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 14:01:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 14:01:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 14:01:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 14:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 283 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; cloudutils::CloudData: 50 KB; TcpIpConnectionsManager: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3883 KB; 2026-05-23 14:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 310 KB; ProcessInfo: 286 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; cloudutils::CloudData: 50 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3874 KB; 2026-05-23 14:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 311 KB; ProcessInfo: 286 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; cloudutils::CloudData: 50 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3882 KB; 2026-05-23 14:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 561 KB; rules::ProcessConditionsCache: 313 KB; ProcessInfo: 292 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; cloudutils::CloudData: 50 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3896 KB; 2026-05-23 14:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 14:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 315 KB; ProcessInfo: 293 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; cloudutils::CloudData: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3900 KB; 2026-05-23 14:06:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 14:06:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 14:06:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 14:06:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 14:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 315 KB; ProcessInfo: 293 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; cloudutils::CloudData: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3905 KB; 2026-05-23 14:07:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 14:01:43, To:, 2026-05-23 14:07:53, Duration (s):, 370, Events Per Second:, 0.278, Events:, 103, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 102, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16197 2026-05-23 14:07:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s447ms. 2026-05-23 14:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 236 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; cloudutils::CloudData: 50 KB; TcpIpConnectionsManager: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3853 KB; 2026-05-23 14:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 327 KB; ProcessInfo: 259 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3914 KB; 2026-05-23 14:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 351 KB; ProcessInfo: 327 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4056 KB; 2026-05-23 14:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 14:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 325 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 72 KB; cloudutils::CloudData: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4005 KB; 2026-05-23 14:11:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 14:11:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 14:11:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 14:11:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 14:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 325 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 51 KB; cloudutils::CloudData: 50 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3992 KB; 2026-05-23 14:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 325 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; cloudutils::CloudData: 50 KB; TcpIpConnectionsManager: 33 KB; BaseEvent: 27 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3981 KB; 2026-05-23 14:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 327 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; cloudutils::CloudData: 50 KB; BaseEvent: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3980 KB; 2026-05-23 14:14:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 14:07:56, To:, 2026-05-23 14:14:53, Duration (s):, 417, Events Per Second:, 0.640, Events:, 267, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 266, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34199 2026-05-23 14:14:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s028ms. 2026-05-23 14:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 561 KB; rules::ProcessConditionsCache: 325 KB; ProcessInfo: 212 KB; ModuleInfoCache: 132 KB; CacheEntry: 117 KB; cloudutils::CloudData: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3809 KB; 2026-05-23 14:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 14:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 332 KB; ProcessInfo: 220 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3844 KB; 2026-05-23 14:16:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 14:16:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 14:16:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 14:16:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 14:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 327 KB; ProcessInfo: 220 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3840 KB; 2026-05-23 14:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 330 KB; ProcessInfo: 224 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3851 KB; 2026-05-23 14:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 292 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 104 KB; TcpIpConnectionsManager: 98 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3795 KB; 2026-05-23 14:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 292 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 51 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3708 KB; 2026-05-23 14:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 14:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 298 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 51 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3706 KB; 2026-05-23 14:21:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 14:21:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 14:21:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 14:21:02 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 14:21:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 14:15:01, To:, 2026-05-23 14:21:53, Duration (s):, 412, Events Per Second:, 0.558, Events:, 230, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 229, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28753 2026-05-23 14:21:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s674ms. 2026-05-23 14:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 265 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 51 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3629 KB; 2026-05-23 14:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 265 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; cloudutils::CloudData: 51 KB; rules::ProcessConditionsCache: 46 KB; TcpIpConnectionsManager: 24 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3593 KB; 2026-05-23 14:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 277 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; cloudutils::CloudData: 51 KB; rules::ProcessConditionsCache: 46 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3615 KB; 2026-05-23 14:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 672 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 277 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; cloudutils::CloudData: 51 KB; rules::ProcessConditionsCache: 46 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3622 KB; 2026-05-23 14:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 14:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 326 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 99 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3791 KB; 2026-05-23 14:26:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 14:26:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 14:26:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 14:26:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 14:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 326 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 51 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3723 KB; 2026-05-23 14:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 326 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 51 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3726 KB; 2026-05-23 14:28:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 14:23:19, To:, 2026-05-23 14:28:53, Duration (s):, 334, Events Per Second:, 0.496, Events:, 166, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 165, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21021 2026-05-23 14:28:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s576ms. 2026-05-23 14:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 230 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; cloudutils::CloudData: 51 KB; rules::ProcessConditionsCache: 49 KB; TcpIpConnectionsManager: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3574 KB; 2026-05-23 14:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 233 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; cloudutils::CloudData: 51 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3562 KB; 2026-05-23 14:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 14:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 242 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 58 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3578 KB; 2026-05-23 14:31:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 14:31:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 14:31:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 14:31:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 14:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 276 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 78 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3679 KB; 2026-05-23 14:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 276 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 60 KB; TcpIpConnectionsManager: 59 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3655 KB; 2026-05-23 14:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 299 KB; ModuleInfoCache: 133 KB; rules::ProcessConditionsCache: 122 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3780 KB; 2026-05-23 14:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 299 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 60 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3686 KB; 2026-05-23 14:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 14:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:35:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 14:28:57, To:, 2026-05-23 14:35:53, Duration (s):, 416, Events Per Second:, 0.473, Events:, 197, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 196, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25518 2026-05-23 14:35:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s728ms. 2026-05-23 14:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 672 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 239 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 62 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3598 KB; 2026-05-23 14:36:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 14:36:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 14:36:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 14:36:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 14:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 239 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 62 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3599 KB; 2026-05-23 14:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 672 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 262 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 62 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3629 KB; 2026-05-23 14:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 268 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 62 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3641 KB; 2026-05-23 14:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 312 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 65 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3713 KB; 2026-05-23 14:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 14:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 664 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 324 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 84 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3727 KB; 2026-05-23 14:41:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 14:41:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 14:41:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 14:41:03 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 14:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 324 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 73 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3713 KB; 2026-05-23 14:42:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 14:37:15, To:, 2026-05-23 14:42:53, Duration (s):, 338, Events Per Second:, 0.813, Events:, 275, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 274, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35455 2026-05-23 14:42:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s881ms. 2026-05-23 14:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 245 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 102 KB; TcpIpConnectionsManager: 52 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3652 KB; 2026-05-23 14:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 251 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 74 KB; TcpIpConnectionsManager: 57 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3628 KB; 2026-05-23 14:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 262 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3651 KB; 2026-05-23 14:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 14:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 311 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 115 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3805 KB; 2026-05-23 14:46:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 14:46:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 14:46:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 14:46:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 14:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 323 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 97 KB; rules::ProcessConditionsCache: 82 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3776 KB; 2026-05-23 14:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 324 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 87 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3770 KB; 2026-05-23 14:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 370 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 100 KB; cloudutils::CloudData: 51 KB; BaseEvent: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3950 KB; 2026-05-23 14:49:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 14:42:53, To:, 2026-05-23 14:49:53, Duration (s):, 420, Events Per Second:, 0.894, Events:, 376, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 375, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46337 2026-05-23 14:49:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s884ms. 2026-05-23 14:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 271 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 90 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3696 KB; 2026-05-23 14:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 14:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 661 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 276 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; TcpIpConnectionsManager: 85 KB; rules::ProcessConditionsCache: 83 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3680 KB; 2026-05-23 14:51:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 14:51:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 14:51:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 14:51:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 14:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 721 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 277 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 83 KB; TcpIpConnectionsManager: 67 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3729 KB; 2026-05-23 14:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 722 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 277 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 83 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3702 KB; 2026-05-23 14:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 703 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 283 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 85 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3695 KB; 2026-05-23 14:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 705 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 283 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 85 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3701 KB; 2026-05-23 14:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 14:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 14:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 706 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 287 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 85 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 28 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3710 KB; 2026-05-23 14:56:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 14:56:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 14:56:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 14:56:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 14:56:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 14:49:51, To:, 2026-05-23 14:56:53, Duration (s):, 422, Events Per Second:, 0.125, Events:, 53, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 52, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8791 2026-05-23 14:56:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s292ms. 2026-05-23 14:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 707 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 215 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 86 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3621 KB; 2026-05-23 14:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 215 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 86 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3627 KB; 2026-05-23 14:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 709 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 220 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 91 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3643 KB; 2026-05-23 14:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 739 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 710 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 223 KB; ModuleInfoCache: 133 KB; CacheEntry: 117 KB; rules::ProcessConditionsCache: 91 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; TcpIpConnectionsManager: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3647 KB; 2026-05-23 15:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 15:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 424 KB; rules::ProcessConditionsCache: 184 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; BaseEvent: 44 KB; TcpIpConnectionsManager: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3961 KB; 2026-05-23 15:01:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 15:01:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 15:01:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 15:01:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 15:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 424 KB; rules::ProcessConditionsCache: 184 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; BaseEvent: 44 KB; TcpIpConnectionsManager: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3967 KB; 2026-05-23 15:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 424 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; BaseEvent: 45 KB; TcpIpConnectionsManager: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3958 KB; 2026-05-23 15:03:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 14:56:56, To:, 2026-05-23 15:03:53, Duration (s):, 417, Events Per Second:, 1.272, Events:, 531, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 528, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 62208 2026-05-23 15:03:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s860ms. 2026-05-23 15:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 210 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3663 KB; 2026-05-23 15:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 212 KB; rules::ProcessConditionsCache: 189 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3671 KB; 2026-05-23 15:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 15:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 223 KB; rules::ProcessConditionsCache: 193 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 31 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3698 KB; 2026-05-23 15:06:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 15:06:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 15:06:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 15:06:04 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 15:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 233 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3708 KB; 2026-05-23 15:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 233 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3712 KB; 2026-05-23 15:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 235 KB; rules::ProcessConditionsCache: 188 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3719 KB; 2026-05-23 15:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 191 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3777 KB; 2026-05-23 15:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 15:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:10:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 15:03:57, To:, 2026-05-23 15:10:53, Duration (s):, 416, Events Per Second:, 0.483, Events:, 201, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 200, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25944 2026-05-23 15:10:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s474ms. 2026-05-23 15:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 261 KB; rules::ProcessConditionsCache: 200 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3739 KB; 2026-05-23 15:11:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 15:11:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 15:11:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 15:11:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 15:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 276 KB; rules::ProcessConditionsCache: 219 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3796 KB; 2026-05-23 15:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 648 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 292 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; TcpIpConnectionsManager: 87 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3969 KB; 2026-05-23 15:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 326 KB; rules::ProcessConditionsCache: 204 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3879 KB; 2026-05-23 15:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 745 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 200 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; TcpIpConnectionsManager: 90 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3883 KB; 2026-05-23 15:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 15:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 710 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 202 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; TcpIpConnectionsManager: 69 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3936 KB; 2026-05-23 15:16:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 15:16:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 15:16:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 15:16:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 15:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 714 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 384 KB; rules::ProcessConditionsCache: 322 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4156 KB; 2026-05-23 15:17:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 15:11:06, To:, 2026-05-23 15:17:53, Duration (s):, 407, Events Per Second:, 0.832, Events:, 339, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 338, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40807 2026-05-23 15:17:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s770ms. 2026-05-23 15:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 694 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3824 KB; 2026-05-23 15:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; TcpIpConnectionsManager: 74 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3797 KB; 2026-05-23 15:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 267 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3798 KB; 2026-05-23 15:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 15:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 663 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 271 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3768 KB; 2026-05-23 15:21:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 15:21:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 15:21:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 15:21:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 15:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3776 KB; 2026-05-23 15:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3782 KB; 2026-05-23 15:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3784 KB; 2026-05-23 15:24:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 15:17:54, To:, 2026-05-23 15:24:53, Duration (s):, 419, Events Per Second:, 0.048, Events:, 20, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 19, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 3755 2026-05-23 15:24:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s735ms. 2026-05-23 15:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 213 KB; ProcessInfo: 211 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3720 KB; 2026-05-23 15:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 15:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 215 KB; ProcessInfo: 214 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3727 KB; 2026-05-23 15:26:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 15:26:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 15:26:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 15:26:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 15:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 218 KB; rules::ProcessConditionsCache: 217 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 21 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3743 KB; 2026-05-23 15:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 242 KB; rules::ProcessConditionsCache: 220 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3755 KB; 2026-05-23 15:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 242 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; cloudutils::CloudData: 51 KB; TcpIpConnectionsManager: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3755 KB; 2026-05-23 15:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 746 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 266 KB; ProcessInfo: 265 KB; ModuleInfoCache: 134 KB; CacheEntry: 118 KB; TcpIpConnectionsManager: 77 KB; cloudutils::CloudData: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3863 KB; 2026-05-23 15:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 15:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 228 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 54 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3829 KB; 2026-05-23 15:31:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 15:31:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 15:31:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 15:31:05 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 15:31:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 15:25:01, To:, 2026-05-23 15:31:53, Duration (s):, 412, Events Per Second:, 0.596, Events:, 246, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 245, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31035 2026-05-23 15:31:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s738ms. 2026-05-23 15:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 271 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 77 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3813 KB; 2026-05-23 15:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 660 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 293 KB; rules::ProcessConditionsCache: 228 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 7 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3892 KB; 2026-05-23 15:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 687 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 90 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3959 KB; 2026-05-23 15:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 704 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 230 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 52 KB; ExtendedTcpIpConnectionInfo: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3967 KB; 2026-05-23 15:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 15:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 331 KB; rules::ProcessConditionsCache: 271 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 52 KB; ExtendedTcpIpConnectionInfo: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4083 KB; 2026-05-23 15:36:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 15:36:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 15:36:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 15:36:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 15:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 748 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 52 KB; ExtendedTcpIpConnectionInfo: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4099 KB; 2026-05-23 15:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 749 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 339 KB; rules::ProcessConditionsCache: 234 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 52 KB; ExtendedTcpIpConnectionInfo: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4086 KB; 2026-05-23 15:38:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 15:31:56, To:, 2026-05-23 15:38:53, Duration (s):, 417, Events Per Second:, 0.443, Events:, 185, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 184, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23487 2026-05-23 15:38:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s148ms. 2026-05-23 15:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 748 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 242 KB; rules::ProcessConditionsCache: 237 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 52 KB; ExtendedTcpIpConnectionInfo: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3952 KB; 2026-05-23 15:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 286 KB; rules::ProcessConditionsCache: 234 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 52 KB; ExtendedTcpIpConnectionInfo: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3911 KB; 2026-05-23 15:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 15:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 294 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 52 KB; ExtendedTcpIpConnectionInfo: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4032 KB; 2026-05-23 15:41:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 15:41:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 15:41:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 15:41:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 15:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 52 KB; ExtendedTcpIpConnectionInfo: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3993 KB; 2026-05-23 15:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 688 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 69 KB; cloudutils::CloudData: 52 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3977 KB; 2026-05-23 15:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 694 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 52 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3981 KB; 2026-05-23 15:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 757 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 355 KB; rules::ProcessConditionsCache: 243 KB; ModuleInfoCache: 135 KB; CacheEntry: 120 KB; TcpIpConnectionsManager: 53 KB; cloudutils::CloudData: 52 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3967 KB; 2026-05-23 15:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 15:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:45:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 15:38:51, To:, 2026-05-23 15:45:53, Duration (s):, 422, Events Per Second:, 0.862, Events:, 364, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 359, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44680 2026-05-23 15:45:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s404ms. 2026-05-23 15:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 249 KB; rules::ProcessConditionsCache: 241 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3833 KB; 2026-05-23 15:46:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 15:46:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 15:46:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 15:46:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 15:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 251 KB; rules::ProcessConditionsCache: 246 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; TcpIpConnectionsManager: 67 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ExtendedTcpIpConnectionInfo: 11 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3848 KB; 2026-05-23 15:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 263 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; cloudutils::CloudData: 52 KB; TcpIpConnectionsManager: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3859 KB; 2026-05-23 15:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 265 KB; rules::ProcessConditionsCache: 246 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; cloudutils::CloudData: 52 KB; TcpIpConnectionsManager: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3837 KB; 2026-05-23 15:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 656 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 246 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3892 KB; 2026-05-23 15:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 15:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 644 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3898 KB; 2026-05-23 15:51:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 15:51:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 15:51:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 15:51:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 15:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; cloudutils::CloudData: 52 KB; TcpIpConnectionsManager: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3890 KB; 2026-05-23 15:52:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 15:46:44, To:, 2026-05-23 15:52:53, Duration (s):, 369, Events Per Second:, 0.352, Events:, 130, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 129, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17235 2026-05-23 15:52:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s119ms. 2026-05-23 15:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 252 KB; ProcessInfo: 215 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; cloudutils::CloudData: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3763 KB; 2026-05-23 15:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 310 KB; ProcessInfo: 268 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3953 KB; 2026-05-23 15:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 250 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3877 KB; 2026-05-23 15:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 15:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 15:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 271 KB; rules::ProcessConditionsCache: 253 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3885 KB; 2026-05-23 15:56:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 15:56:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 15:56:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 15:56:06 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 15:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 257 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; cloudutils::CloudData: 52 KB; TcpIpConnectionsManager: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3881 KB; 2026-05-23 15:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 253 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; cloudutils::CloudData: 52 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3862 KB; 2026-05-23 15:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 294 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; TcpIpConnectionsManager: 55 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3964 KB; 2026-05-23 15:59:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 15:53:01, To:, 2026-05-23 15:59:53, Duration (s):, 412, Events Per Second:, 0.577, Events:, 238, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 237, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29269 2026-05-23 15:59:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s682ms. 2026-05-23 15:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 922 KB; ModuleMetadata: 771 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 254 KB; ProcessInfo: 236 KB; ModuleInfoCache: 137 KB; CacheEntry: 121 KB; cloudutils::CloudData: 52 KB; TcpIpConnectionsManager: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3812 KB; 2026-05-23 16:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 16:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 305 KB; ProcessInfo: 279 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3945 KB; 2026-05-23 16:01:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 16:01:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 16:01:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 16:01:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 16:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 301 KB; rules::ProcessConditionsCache: 298 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3980 KB; 2026-05-23 16:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 274 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3997 KB; 2026-05-23 16:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 645 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 272 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 54 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3989 KB; 2026-05-23 16:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 313 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 99 KB; cloudutils::CloudData: 54 KB; BaseEvent: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4116 KB; 2026-05-23 16:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 16:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 651 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 395 KB; rules::ProcessConditionsCache: 318 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 54 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4157 KB; 2026-05-23 16:06:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 16:06:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 16:06:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 16:06:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 16:06:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 16:00:01, To:, 2026-05-23 16:06:53, Duration (s):, 412, Events Per Second:, 1.038, Events:, 428, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 427, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51590 2026-05-23 16:06:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s447ms. 2026-05-23 16:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 283 KB; rules::ProcessConditionsCache: 276 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 97 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3936 KB; 2026-05-23 16:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 326 KB; ModuleInfoCache: 137 KB; TcpIpConnectionsManager: 124 KB; CacheEntry: 122 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4086 KB; 2026-05-23 16:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 352 KB; rules::ProcessConditionsCache: 278 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 117 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4059 KB; 2026-05-23 16:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 652 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 420 KB; rules::ProcessConditionsCache: 282 KB; ModuleInfoCache: 137 KB; TcpIpConnectionsManager: 124 KB; CacheEntry: 122 KB; cloudutils::CloudData: 54 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4166 KB; 2026-05-23 16:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 16:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 641 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 483 KB; rules::ProcessConditionsCache: 330 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 54 KB; BaseEvent: 53 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4268 KB; 2026-05-23 16:11:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 16:11:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 16:11:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 16:11:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 16:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 642 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 531 KB; rules::ProcessConditionsCache: 404 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 81 KB; BaseEvent: 62 KB; cloudutils::CloudData: 54 KB; BatchSerializer::EventsQueueTag: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4406 KB; 2026-05-23 16:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 531 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 78 KB; BaseEvent: 71 KB; cloudutils::CloudData: 54 KB; rules::ProcessConditionsCache: 42 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 4044 KB; 2026-05-23 16:13:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 16:06:55, To:, 2026-05-23 16:13:53, Duration (s):, 418, Events Per Second:, 1.591, Events:, 666, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 665, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 79454 2026-05-23 16:13:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s288ms. 2026-05-23 16:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 265 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 54 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3653 KB; 2026-05-23 16:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 646 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 265 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 54 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3656 KB; 2026-05-23 16:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 16:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 773 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 647 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 270 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; cloudutils::CloudData: 54 KB; rules::ProcessConditionsCache: 39 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3630 KB; 2026-05-23 16:16:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 16:16:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 16:16:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 16:16:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 16:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 270 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; cloudutils::CloudData: 54 KB; rules::ProcessConditionsCache: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3632 KB; 2026-05-23 16:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 650 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 280 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; cloudutils::CloudData: 54 KB; rules::ProcessConditionsCache: 43 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3655 KB; 2026-05-23 16:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 293 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 45 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3747 KB; 2026-05-23 16:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 299 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 52 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3719 KB; 2026-05-23 16:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 16:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:20:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 16:14:51, To:, 2026-05-23 16:20:53, Duration (s):, 362, Events Per Second:, 0.284, Events:, 103, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 102, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15241 2026-05-23 16:20:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s544ms. 2026-05-23 16:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 240 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 54 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3556 KB; 2026-05-23 16:21:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 16:21:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 16:21:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 16:21:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 16:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 305 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 120 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3707 KB; 2026-05-23 16:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 305 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 85 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3642 KB; 2026-05-23 16:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 308 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 85 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3652 KB; 2026-05-23 16:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 309 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 85 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3644 KB; 2026-05-23 16:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 16:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 318 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 89 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3660 KB; 2026-05-23 16:26:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 16:26:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 16:26:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 16:26:07 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 16:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 318 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 87 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 30 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3662 KB; 2026-05-23 16:27:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 16:20:57, To:, 2026-05-23 16:27:53, Duration (s):, 416, Events Per Second:, 0.487, Events:, 203, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 202, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27020 2026-05-23 16:27:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s006ms. 2026-05-23 16:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 227 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 88 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 30 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3542 KB; 2026-05-23 16:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 232 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 88 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3549 KB; 2026-05-23 16:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 235 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 86 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; TcpIpConnectionsManager: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3558 KB; 2026-05-23 16:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 16:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 775 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 245 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 97 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; TcpIpConnectionsManager: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3571 KB; 2026-05-23 16:31:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 16:31:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 16:31:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 16:31:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 16:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 246 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 95 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 30 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3567 KB; 2026-05-23 16:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 248 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 97 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3574 KB; 2026-05-23 16:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 249 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 97 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3600 KB; 2026-05-23 16:34:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 16:28:05, To:, 2026-05-23 16:34:53, Duration (s):, 408, Events Per Second:, 0.262, Events:, 107, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 106, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16483 2026-05-23 16:34:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s486ms. 2026-05-23 16:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 245 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 122 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3606 KB; 2026-05-23 16:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 16:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 248 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 97 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3600 KB; 2026-05-23 16:36:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 16:36:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 16:36:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 16:36:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 16:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 248 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 97 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3605 KB; 2026-05-23 16:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 248 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 100 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3623 KB; 2026-05-23 16:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 248 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 100 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3618 KB; 2026-05-23 16:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 331 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 104 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3743 KB; 2026-05-23 16:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 16:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 611 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 337 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 111 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3799 KB; 2026-05-23 16:41:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 16:41:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 16:41:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 16:41:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 16:41:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 16:34:54, To:, 2026-05-23 16:41:53, Duration (s):, 419, Events Per Second:, 0.725, Events:, 304, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 303, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40807 2026-05-23 16:41:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s738ms. 2026-05-23 16:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3784 KB; 2026-05-23 16:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 377 KB; rules::ProcessConditionsCache: 229 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 3971 KB; 2026-05-23 16:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 380 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; rules::ProcessConditionsCache: 117 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3804 KB; 2026-05-23 16:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 440 KB; rules::ProcessConditionsCache: 148 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 52 KB; BaseEvent: 32 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3921 KB; 2026-05-23 16:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 16:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 776 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 453 KB; rules::ProcessConditionsCache: 146 KB; ModuleInfoCache: 137 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 52 KB; BaseEvent: 39 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3932 KB; 2026-05-23 16:46:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 16:46:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 16:46:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 16:46:08 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 16:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 455 KB; rules::ProcessConditionsCache: 146 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; cloudutils::CloudData: 52 KB; BaseEvent: 46 KB; TcpIpConnectionsManager: 42 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3908 KB; 2026-05-23 16:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 486 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 68 KB; BaseEvent: 53 KB; cloudutils::CloudData: 52 KB; ProcessInfoCommandLineTag: 25 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4011 KB; 2026-05-23 16:48:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 16:41:54, To:, 2026-05-23 16:48:53, Duration (s):, 419, Events Per Second:, 1.266, Events:, 531, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 520, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67287 2026-05-23 16:48:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s553ms. 2026-05-23 16:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 212 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 101 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3809 KB; 2026-05-23 16:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 112 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3787 KB; 2026-05-23 16:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 16:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 187 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 109 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3820 KB; 2026-05-23 16:51:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 16:51:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 16:51:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 16:51:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 16:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 185 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3791 KB; 2026-05-23 16:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 346 KB; rules::ProcessConditionsCache: 189 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 52 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3812 KB; 2026-05-23 16:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 187 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 55 KB; cloudutils::CloudData: 52 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3827 KB; 2026-05-23 16:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 359 KB; rules::ProcessConditionsCache: 187 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 52 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3839 KB; 2026-05-23 16:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 16:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 16:55:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 16:48:46, To:, 2026-05-23 16:55:53, Duration (s):, 427, Events Per Second:, 1.088, Events:, 465, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 284, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 90, Livegrid:, 90, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 54158 2026-05-23 16:55:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s305ms. 2026-05-23 16:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 282 KB; rules::ProcessConditionsCache: 231 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3789 KB; 2026-05-23 16:56:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 16:56:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 16:56:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 16:56:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 16:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 282 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3733 KB; 2026-05-23 16:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 227 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 120 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3890 KB; 2026-05-23 16:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 355 KB; rules::ProcessConditionsCache: 251 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 120 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3958 KB; 2026-05-23 16:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ProcessInfo: 355 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 106 KB; cloudutils::CloudData: 52 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3878 KB; 2026-05-23 17:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 17:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 778 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 380 KB; rules::ProcessConditionsCache: 218 KB; ModuleInfoCache: 138 KB; CacheEntry: 122 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 52 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3907 KB; 2026-05-23 17:01:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 17:01:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 17:01:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 17:01:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 17:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 380 KB; rules::ProcessConditionsCache: 218 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 48 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3901 KB; 2026-05-23 17:02:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 16:55:54, To:, 2026-05-23 17:02:53, Duration (s):, 419, Events Per Second:, 0.717, Events:, 301, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 288, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38841 2026-05-23 17:02:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s543ms. 2026-05-23 17:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 245 KB; rules::ProcessConditionsCache: 217 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; TcpIpConnectionsManager: 22 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3683 KB; 2026-05-23 17:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; rules::ProcessConditionsCache: 318 KB; ProcessInfo: 292 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3910 KB; 2026-05-23 17:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 217 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3790 KB; 2026-05-23 17:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 17:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3791 KB; 2026-05-23 17:06:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 17:06:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 17:06:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 17:06:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 17:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 222 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3847 KB; 2026-05-23 17:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 342 KB; rules::ProcessConditionsCache: 217 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 76 KB; cloudutils::CloudData: 54 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3869 KB; 2026-05-23 17:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 342 KB; rules::ProcessConditionsCache: 217 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 54 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3874 KB; 2026-05-23 17:09:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 17:03:33, To:, 2026-05-23 17:09:53, Duration (s):, 380, Events Per Second:, 1.343, Events:, 511, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 384, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 63, Livegrid:, 63, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57069 2026-05-23 17:09:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s129ms. 2026-05-23 17:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ProcessInfo: 290 KB; rules::ProcessConditionsCache: 222 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3774 KB; 2026-05-23 17:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 17:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 306 KB; rules::ProcessConditionsCache: 237 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3780 KB; 2026-05-23 17:11:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 17:11:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 17:11:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 17:11:09 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 17:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 330 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3898 KB; 2026-05-23 17:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 340 KB; rules::ProcessConditionsCache: 231 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3853 KB; 2026-05-23 17:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 228 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 68 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3855 KB; 2026-05-23 17:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 226 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3850 KB; 2026-05-23 17:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 17:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 779 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 352 KB; rules::ProcessConditionsCache: 231 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3848 KB; 2026-05-23 17:16:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 17:16:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 17:16:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 17:16:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 17:16:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 17:10:12, To:, 2026-05-23 17:16:53, Duration (s):, 401, Events Per Second:, 0.416, Events:, 167, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 166, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22048 2026-05-23 17:16:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s772ms. 2026-05-23 17:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; rules::ProcessConditionsCache: 231 KB; ProcessInfo: 230 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 52 KB; TcpIpConnectionsManager: 30 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3691 KB; 2026-05-23 17:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 235 KB; rules::ProcessConditionsCache: 233 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 30 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3704 KB; 2026-05-23 17:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 235 KB; rules::ProcessConditionsCache: 233 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3704 KB; 2026-05-23 17:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 236 KB; rules::ProcessConditionsCache: 233 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 3709 KB; 2026-05-23 17:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 17:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::ProcessConditionsCache: 248 KB; ProcessInfo: 248 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3737 KB; 2026-05-23 17:21:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 17:21:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 17:21:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 17:21:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 17:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 314 KB; rules::ProcessConditionsCache: 273 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 47 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3868 KB; 2026-05-23 17:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 351 KB; rules::ProcessConditionsCache: 294 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 43 KB; BaseEvent: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3947 KB; 2026-05-23 17:23:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 17:17:00, To:, 2026-05-23 17:23:53, Duration (s):, 413, Events Per Second:, 1.214, Events:, 502, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 447, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 27, Livegrid:, 27, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57876 2026-05-23 17:23:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s863ms. 2026-05-23 17:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 389 KB; rules::ProcessConditionsCache: 329 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 52 KB; TcpIpConnectionsManager: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3984 KB; 2026-05-23 17:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 420 KB; rules::ProcessConditionsCache: 331 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 52 KB; TcpIpConnectionsManager: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4030 KB; 2026-05-23 17:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 17:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 472 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 97 KB; rules::ProcessConditionsCache: 55 KB; cloudutils::CloudData: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3887 KB; 2026-05-23 17:26:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 17:26:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 17:26:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 17:26:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 17:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 472 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 94 KB; cloudutils::CloudData: 52 KB; rules::ProcessConditionsCache: 40 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3863 KB; 2026-05-23 17:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 472 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 52 KB; rules::ProcessConditionsCache: 38 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3852 KB; 2026-05-23 17:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 474 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 52 KB; TcpIpConnectionsManager: 52 KB; rules::ProcessConditionsCache: 38 KB; BaseEvent: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3837 KB; 2026-05-23 17:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 596 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 478 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 52 KB; BaseEvent: 38 KB; rules::ProcessConditionsCache: 38 KB; TcpIpConnectionsManager: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3858 KB; 2026-05-23 17:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 17:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:30:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 17:23:57, To:, 2026-05-23 17:30:53, Duration (s):, 416, Events Per Second:, 0.663, Events:, 276, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 265, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34777 2026-05-23 17:30:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s261ms. 2026-05-23 17:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 782 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 246 KB; ModuleInfoCache: 138 KB; CacheEntry: 123 KB; cloudutils::CloudData: 52 KB; rules::ProcessConditionsCache: 50 KB; TcpIpConnectionsManager: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3567 KB; 2026-05-23 17:31:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 17:31:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 17:31:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 17:31:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 17:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 254 KB; ModuleInfoCache: 139 KB; CacheEntry: 124 KB; cloudutils::CloudData: 54 KB; rules::ProcessConditionsCache: 50 KB; TcpIpConnectionsManager: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3589 KB; 2026-05-23 17:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 271 KB; ModuleInfoCache: 139 KB; CacheEntry: 124 KB; rules::ProcessConditionsCache: 70 KB; TcpIpConnectionsManager: 55 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3626 KB; 2026-05-23 17:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 304 KB; ModuleInfoCache: 139 KB; CacheEntry: 124 KB; rules::ProcessConditionsCache: 120 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3751 KB; 2026-05-23 17:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 308 KB; ModuleInfoCache: 139 KB; rules::ProcessConditionsCache: 129 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3777 KB; 2026-05-23 17:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 17:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 323 KB; ModuleInfoCache: 139 KB; CacheEntry: 124 KB; rules::ProcessConditionsCache: 122 KB; TcpIpConnectionsManager: 76 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3797 KB; 2026-05-23 17:36:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 17:36:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 17:36:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 17:36:10 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 17:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 931 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 653 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 370 KB; rules::ProcessConditionsCache: 221 KB; ModuleInfoCache: 139 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 124 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4097 KB; 2026-05-23 17:37:53 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 17:31:24, To:, 2026-05-23 17:37:53, Duration (s):, 389, Events Per Second:, 1.009, Events:, 393, File:, 3, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 383, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 4, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 54264 2026-05-23 17:37:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s979ms. 2026-05-23 17:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 605 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 396 KB; rules::ProcessConditionsCache: 286 KB; TcpIpConnectionsManager: 186 KB; ModuleInfoCache: 139 KB; CacheEntry: 124 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4219 KB; 2026-05-23 17:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 396 KB; TcpIpConnectionsManager: 189 KB; ModuleInfoCache: 139 KB; rules::ProcessConditionsCache: 134 KB; CacheEntry: 124 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4031 KB; 2026-05-23 17:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 503 KB; rules::ProcessConditionsCache: 193 KB; TcpIpConnectionsManager: 189 KB; ModuleInfoCache: 139 KB; CacheEntry: 124 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; cloudutils::CloudData: 54 KB; BaseEvent: 31 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4272 KB; 2026-05-23 17:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 17:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 509 KB; rules::ProcessConditionsCache: 198 KB; TcpIpConnectionsManager: 150 KB; ModuleInfoCache: 139 KB; CacheEntry: 124 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; cloudutils::CloudData: 54 KB; BaseEvent: 38 KB; ProcessInfoCommandLineTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4248 KB; 2026-05-23 17:41:13 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 17:41:13 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 17:41:13 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 17:41:13 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 17:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 527 KB; rules::ProcessConditionsCache: 200 KB; ModuleInfoCache: 139 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; cloudutils::CloudData: 54 KB; BaseEvent: 48 KB; ProcessInfoCommandLineTag: 28 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4228 KB; 2026-05-23 17:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; ProcessInfo: 561 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 266 KB; ModuleInfoCache: 139 KB; TcpIpConnectionsManager: 135 KB; CacheEntry: 124 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; BaseEvent: 55 KB; cloudutils::CloudData: 54 KB; ProcessInfoCommandLineTag: 28 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4389 KB; 2026-05-23 17:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; ProcessInfo: 562 KB; rules::AncestorEvaluations: 561 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 139 KB; TcpIpConnectionsManager: 132 KB; CacheEntry: 124 KB; BaseEvent: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 54 KB; ProcessInfoCommandLineTag: 28 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4267 KB; 2026-05-23 17:44:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 17:37:08, To:, 2026-05-23 17:44:53, Duration (s):, 465, Events Per Second:, 1.344, Events:, 626, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 625, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 86810 2026-05-23 17:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 342 KB; rules::ProcessConditionsCache: 155 KB; TcpIpConnectionsManager: 142 KB; ModuleInfoCache: 139 KB; CacheEntry: 124 KB; BatchStringTag: 84 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 4019 KB; 2026-05-23 17:44:57 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s055ms. 2026-05-23 17:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 17:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 787 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 356 KB; ModuleInfoCache: 139 KB; TcpIpConnectionsManager: 138 KB; CacheEntry: 124 KB; rules::ProcessConditionsCache: 109 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3869 KB; 2026-05-23 17:46:14 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 17:46:14 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 17:46:14 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 17:46:14 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 17:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; ProcessInfo: 373 KB; rules::ProcessConditionsCache: 142 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 112 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3930 KB; 2026-05-23 17:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; ProcessInfo: 373 KB; rules::ProcessConditionsCache: 142 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 54 KB; BaseEvent: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3903 KB; 2026-05-23 17:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; ProcessInfo: 373 KB; rules::ProcessConditionsCache: 142 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 50 KB; BaseEvent: 37 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3877 KB; 2026-05-23 17:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; ProcessInfo: 373 KB; rules::ProcessConditionsCache: 142 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 48 KB; BaseEvent: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3875 KB; 2026-05-23 17:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 17:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; ProcessInfo: 373 KB; rules::ProcessConditionsCache: 142 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 48 KB; BaseEvent: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3875 KB; 2026-05-23 17:51:20 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 17:51:20 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 17:51:20 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 17:51:20 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 17:51:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 17:44:46, To:, 2026-05-23 17:51:54, Duration (s):, 428, Events Per Second:, 0.983, Events:, 421, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 354, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 33, Livegrid:, 33, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53064 2026-05-23 17:51:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s819ms. 2026-05-23 17:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 351 KB; ModuleInfoCache: 140 KB; TcpIpConnectionsManager: 125 KB; CacheEntry: 124 KB; rules::ProcessConditionsCache: 101 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3820 KB; 2026-05-23 17:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ProcessInfo: 376 KB; rules::ProcessConditionsCache: 154 KB; TcpIpConnectionsManager: 152 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3935 KB; 2026-05-23 17:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 376 KB; TcpIpConnectionsManager: 152 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; rules::ProcessConditionsCache: 103 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3903 KB; 2026-05-23 17:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 380 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; rules::ProcessConditionsCache: 105 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3822 KB; 2026-05-23 17:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 17:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 17:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 389 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; rules::ProcessConditionsCache: 116 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3852 KB; 2026-05-23 17:56:21 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 17:56:21 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 17:56:21 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 17:56:21 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 17:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 389 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; rules::ProcessConditionsCache: 109 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 37 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3833 KB; 2026-05-23 17:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 418 KB; rules::ProcessConditionsCache: 149 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3951 KB; 2026-05-23 17:58:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 17:51:54, To:, 2026-05-23 17:58:54, Duration (s):, 420, Events Per Second:, 0.433, Events:, 182, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 181, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23091 2026-05-23 17:58:54 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s719ms. 2026-05-23 17:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 270 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; rules::ProcessConditionsCache: 110 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3719 KB; 2026-05-23 17:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 963 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 315 KB; ModuleInfoCache: 140 KB; rules::ProcessConditionsCache: 136 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 109 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3885 KB; 2026-05-23 18:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 18:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 643 KB; ProcessInfo: 628 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 270 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 94 KB; BaseEvent: 74 KB; cloudutils::CloudData: 54 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4446 KB; 2026-05-23 18:01:21 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 18:01:21 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 18:01:21 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 18:01:21 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 18:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; ProcessInfo: 674 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 345 KB; ModuleInfoCache: 140 KB; TcpIpConnectionsManager: 130 KB; CacheEntry: 124 KB; BaseEvent: 83 KB; cloudutils::CloudData: 54 KB; BatchSerializer::EventsQueueTag: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4586 KB; 2026-05-23 18:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; ProcessInfo: 675 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 268 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; BaseEvent: 89 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 54 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4437 KB; 2026-05-23 18:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; ProcessInfo: 727 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::ProcessConditionsCache: 362 KB; ModuleInfoCache: 140 KB; TcpIpConnectionsManager: 138 KB; CacheEntry: 124 KB; BaseEvent: 100 KB; cloudutils::CloudData: 54 KB; BatchSerializer::EventsQueueTag: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4638 KB; 2026-05-23 18:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; ProcessInfo: 732 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::ProcessConditionsCache: 266 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 107 KB; cloudutils::CloudData: 54 KB; BatchSerializer::EventsQueueTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4528 KB; 2026-05-23 18:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 18:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:05:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 17:58:59, To:, 2026-05-23 18:05:54, Duration (s):, 415, Events Per Second:, 2.905, Events:, 1206, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1203, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 134800 2026-05-23 18:05:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s045ms. 2026-05-23 18:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 268 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3913 KB; 2026-05-23 18:06:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 18:06:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 18:06:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 18:06:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 18:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 270 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 76 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3909 KB; 2026-05-23 18:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 268 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3877 KB; 2026-05-23 18:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 318 KB; rules::ProcessConditionsCache: 270 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3896 KB; 2026-05-23 18:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 378 KB; rules::ProcessConditionsCache: 279 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4005 KB; 2026-05-23 18:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 18:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 411 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 54 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4087 KB; 2026-05-23 18:11:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 18:11:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 18:11:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 18:11:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 18:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 434 KB; rules::ProcessConditionsCache: 308 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 99 KB; cloudutils::CloudData: 54 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4150 KB; 2026-05-23 18:12:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 18:06:20, To:, 2026-05-23 18:12:54, Duration (s):, 394, Events Per Second:, 0.888, Events:, 350, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 349, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44484 2026-05-23 18:12:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s927ms. 2026-05-23 18:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ProcessInfo: 301 KB; rules::ProcessConditionsCache: 281 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3913 KB; 2026-05-23 18:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 286 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 68 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3914 KB; 2026-05-23 18:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 315 KB; rules::ProcessConditionsCache: 281 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3929 KB; 2026-05-23 18:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 18:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 792 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 286 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3999 KB; 2026-05-23 18:16:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 18:16:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 18:16:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 18:16:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 18:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 632 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4006 KB; 2026-05-23 18:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 336 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3996 KB; 2026-05-23 18:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 290 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4001 KB; 2026-05-23 18:19:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 18:12:54, To:, 2026-05-23 18:19:54, Duration (s):, 420, Events Per Second:, 0.409, Events:, 172, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 171, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22750 2026-05-23 18:19:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s717ms. 2026-05-23 18:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 639 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 291 KB; ProcessInfo: 279 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 63 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3964 KB; 2026-05-23 18:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 18:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 726 KB; rules::AncestorEvaluations: 561 KB; rules::ProcessConditionsCache: 302 KB; ProcessInfo: 286 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4073 KB; 2026-05-23 18:21:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 18:21:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 18:21:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 18:21:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 18:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 738 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 298 KB; ProcessInfo: 286 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4084 KB; 2026-05-23 18:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 711 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 296 KB; ProcessInfo: 286 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4030 KB; 2026-05-23 18:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 715 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 390 KB; ProcessInfo: 334 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4242 KB; 2026-05-23 18:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 334 KB; rules::ProcessConditionsCache: 298 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4107 KB; 2026-05-23 18:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 18:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 727 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 339 KB; rules::ProcessConditionsCache: 300 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4166 KB; 2026-05-23 18:26:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 18:26:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 18:26:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 18:26:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 18:26:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 18:20:02, To:, 2026-05-23 18:26:54, Duration (s):, 412, Events Per Second:, 0.393, Events:, 162, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 161, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20657 2026-05-23 18:26:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s892ms. 2026-05-23 18:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 732 KB; rules::AncestorEvaluations: 561 KB; rules::ProcessConditionsCache: 302 KB; ProcessInfo: 290 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4097 KB; 2026-05-23 18:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 735 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 300 KB; ProcessInfo: 290 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4063 KB; 2026-05-23 18:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 737 KB; rules::AncestorEvaluations: 560 KB; rules::ProcessConditionsCache: 315 KB; ProcessInfo: 296 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4100 KB; 2026-05-23 18:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 691 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 337 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 55 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3869 KB; 2026-05-23 18:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 18:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 795 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 693 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 348 KB; ModuleInfoCache: 140 KB; CacheEntry: 124 KB; TcpIpConnectionsManager: 81 KB; rules::ProcessConditionsCache: 58 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3901 KB; 2026-05-23 18:31:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 18:31:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 18:31:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 18:31:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 18:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 348 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 54 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3884 KB; 2026-05-23 18:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 682 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 351 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; cloudutils::CloudData: 54 KB; rules::ProcessConditionsCache: 51 KB; TcpIpConnectionsManager: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3859 KB; 2026-05-23 18:33:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 18:27:04, To:, 2026-05-23 18:33:54, Duration (s):, 410, Events Per Second:, 0.626, Events:, 257, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 256, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33558 2026-05-23 18:33:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s756ms. 2026-05-23 18:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 295 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 101 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3858 KB; 2026-05-23 18:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 317 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 102 KB; rules::ProcessConditionsCache: 70 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3875 KB; 2026-05-23 18:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 18:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 682 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 342 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 122 KB; rules::ProcessConditionsCache: 95 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3954 KB; 2026-05-23 18:36:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 18:36:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 18:36:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 18:36:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 18:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 683 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 365 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 122 KB; rules::ProcessConditionsCache: 119 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4020 KB; 2026-05-23 18:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 685 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 367 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 86 KB; rules::ProcessConditionsCache: 56 KB; cloudutils::CloudData: 54 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3926 KB; 2026-05-23 18:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 687 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 371 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 78 KB; rules::ProcessConditionsCache: 61 KB; cloudutils::CloudData: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3941 KB; 2026-05-23 18:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 689 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 445 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 79 KB; rules::ProcessConditionsCache: 62 KB; cloudutils::CloudData: 54 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4043 KB; 2026-05-23 18:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 18:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:40:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 18:33:54, To:, 2026-05-23 18:40:54, Duration (s):, 420, Events Per Second:, 1.061, Events:, 446, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 445, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57286 2026-05-23 18:40:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s821ms. 2026-05-23 18:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 691 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 327 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 69 KB; TcpIpConnectionsManager: 55 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3850 KB; 2026-05-23 18:41:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 18:41:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 18:41:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 18:41:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 18:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 355 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 86 KB; rules::ProcessConditionsCache: 69 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3896 KB; 2026-05-23 18:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 381 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3951 KB; 2026-05-23 18:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 682 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 383 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 71 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3950 KB; 2026-05-23 18:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 684 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 384 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 69 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3932 KB; 2026-05-23 18:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 18:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 798 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 684 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 387 KB; ModuleInfoCache: 140 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 71 KB; cloudutils::CloudData: 54 KB; TcpIpConnectionsManager: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 21 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3919 KB; 2026-05-23 18:46:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 18:46:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 18:46:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 18:46:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 18:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 688 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 434 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4130 KB; 2026-05-23 18:47:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 18:40:56, To:, 2026-05-23 18:47:54, Duration (s):, 418, Events Per Second:, 0.698, Events:, 292, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 291, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35369 2026-05-23 18:47:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s729ms. 2026-05-23 18:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 684 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 293 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 79 KB; rules::ProcessConditionsCache: 72 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3829 KB; 2026-05-23 18:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 686 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 295 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 79 KB; rules::ProcessConditionsCache: 72 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3835 KB; 2026-05-23 18:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 689 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 296 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 74 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3829 KB; 2026-05-23 18:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 18:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 692 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 304 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 81 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3829 KB; 2026-05-23 18:51:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 18:51:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 18:51:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 18:51:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 18:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 304 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 81 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 30 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3817 KB; 2026-05-23 18:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 701 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 305 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 89 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3854 KB; 2026-05-23 18:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 698 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 306 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 91 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; TcpIpConnectionsManager: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3860 KB; 2026-05-23 18:54:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 18:47:58, To:, 2026-05-23 18:54:54, Duration (s):, 416, Events Per Second:, 0.101, Events:, 42, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 41, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7807 2026-05-23 18:54:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s732ms. 2026-05-23 18:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 698 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 246 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 90 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3784 KB; 2026-05-23 18:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 119, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 18:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 18:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 699 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 254 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 94 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; TcpIpConnectionsManager: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3799 KB; 2026-05-23 18:56:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 18:56:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 18:56:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 18:56:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 18:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 701 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 264 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 109 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; TcpIpConnectionsManager: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3832 KB; 2026-05-23 18:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 700 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 264 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 92 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3806 KB; 2026-05-23 18:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 701 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 265 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 92 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3810 KB; 2026-05-23 18:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 705 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 180 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4006 KB; 2026-05-23 19:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 19:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:true, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 685 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 333 KB; ModuleInfoCache: 141 KB; CacheEntry: 125 KB; rules::ProcessConditionsCache: 119 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3956 KB; 2026-05-23 19:01:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 19:01:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 19:01:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 19:01:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 19:01:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 18:55:01, To:, 2026-05-23 19:01:54, Duration (s):, 413, Events Per Second:, 0.699, Events:, 289, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 288, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37567 2026-05-23 19:01:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s761ms. 2026-05-23 19:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 326 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 114 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3918 KB; 2026-05-23 19:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 326 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 111 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3915 KB; 2026-05-23 19:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 327 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 114 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3890 KB; 2026-05-23 19:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 352 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3991 KB; 2026-05-23 19:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 19:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 358 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 114 KB; TcpIpConnectionsManager: 55 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3931 KB; 2026-05-23 19:06:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 19:06:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 19:06:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 19:06:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 19:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 358 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 114 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3930 KB; 2026-05-23 19:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 358 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 116 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3934 KB; 2026-05-23 19:08:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 19:01:57, To:, 2026-05-23 19:08:54, Duration (s):, 417, Events Per Second:, 0.352, Events:, 147, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 146, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18939 2026-05-23 19:08:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s726ms. 2026-05-23 19:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 257 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 117 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3806 KB; 2026-05-23 19:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 305 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 119 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3886 KB; 2026-05-23 19:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 19:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 334 KB; rules::ProcessConditionsCache: 161 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4000 KB; 2026-05-23 19:11:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 19:11:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 19:11:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 19:11:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 19:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 334 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 124 KB; TcpIpConnectionsManager: 55 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3914 KB; 2026-05-23 19:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 334 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 124 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3919 KB; 2026-05-23 19:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 334 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3913 KB; 2026-05-23 19:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 672 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 336 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3910 KB; 2026-05-23 19:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 19:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:15:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 19:08:54, To:, 2026-05-23 19:15:54, Duration (s):, 420, Events Per Second:, 0.561, Events:, 236, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 235, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30957 2026-05-23 19:15:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s457ms. 2026-05-23 19:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 242 KB; ModuleInfoCache: 141 KB; rules::ProcessConditionsCache: 132 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3789 KB; 2026-05-23 19:16:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 19:16:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 19:16:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 19:16:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 19:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 254 KB; ModuleInfoCache: 141 KB; rules::ProcessConditionsCache: 127 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3805 KB; 2026-05-23 19:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 255 KB; ModuleInfoCache: 141 KB; rules::ProcessConditionsCache: 130 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3812 KB; 2026-05-23 19:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 255 KB; ModuleInfoCache: 141 KB; rules::ProcessConditionsCache: 130 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3811 KB; 2026-05-23 19:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 255 KB; ModuleInfoCache: 141 KB; rules::ProcessConditionsCache: 130 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3808 KB; 2026-05-23 19:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 19:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 264 KB; ModuleInfoCache: 141 KB; rules::ProcessConditionsCache: 134 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3824 KB; 2026-05-23 19:21:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 19:21:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 19:21:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 19:21:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 19:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 688 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 235 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4054 KB; 2026-05-23 19:22:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 19:15:56, To:, 2026-05-23 19:22:54, Duration (s):, 418, Events Per Second:, 0.447, Events:, 187, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 186, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23957 2026-05-23 19:22:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s758ms. 2026-05-23 19:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 687 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 287 KB; ModuleInfoCache: 141 KB; rules::ProcessConditionsCache: 136 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3893 KB; 2026-05-23 19:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 689 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 298 KB; ModuleInfoCache: 141 KB; rules::ProcessConditionsCache: 138 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 3916 KB; 2026-05-23 19:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 689 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 298 KB; ModuleInfoCache: 141 KB; rules::ProcessConditionsCache: 136 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3907 KB; 2026-05-23 19:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 19:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 691 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 302 KB; ModuleInfoCache: 141 KB; rules::ProcessConditionsCache: 138 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3890 KB; 2026-05-23 19:26:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 19:26:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 19:26:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 19:26:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 19:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 694 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 149 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3920 KB; 2026-05-23 19:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 694 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 311 KB; ModuleInfoCache: 141 KB; rules::ProcessConditionsCache: 138 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3904 KB; 2026-05-23 19:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 142 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3902 KB; 2026-05-23 19:29:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 19:22:56, To:, 2026-05-23 19:29:54, Duration (s):, 418, Events Per Second:, 0.203, Events:, 85, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 84, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12496 2026-05-23 19:29:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s700ms. 2026-05-23 19:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 246 KB; ModuleInfoCache: 141 KB; rules::ProcessConditionsCache: 139 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3809 KB; 2026-05-23 19:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 19:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 157 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3888 KB; 2026-05-23 19:31:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 19:31:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 19:31:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 19:31:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 19:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 148 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3866 KB; 2026-05-23 19:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 148 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3866 KB; 2026-05-23 19:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 148 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3870 KB; 2026-05-23 19:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 290 KB; rules::ProcessConditionsCache: 150 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3873 KB; 2026-05-23 19:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 19:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 672 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 293 KB; rules::ProcessConditionsCache: 152 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3885 KB; 2026-05-23 19:36:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 19:36:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 19:36:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 19:36:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 19:36:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 19:30:00, To:, 2026-05-23 19:36:54, Duration (s):, 414, Events Per Second:, 0.302, Events:, 125, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 124, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 17237 2026-05-23 19:36:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s306ms. 2026-05-23 19:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 237 KB; rules::ProcessConditionsCache: 157 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; TcpIpConnectionsManager: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3805 KB; 2026-05-23 19:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 243 KB; rules::ProcessConditionsCache: 159 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3823 KB; 2026-05-23 19:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 243 KB; rules::ProcessConditionsCache: 152 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3817 KB; 2026-05-23 19:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 157 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3896 KB; 2026-05-23 19:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 19:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 166 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; TcpIpConnectionsManager: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3918 KB; 2026-05-23 19:41:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 19:41:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 19:41:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 19:41:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 19:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 163 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3899 KB; 2026-05-23 19:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 163 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3905 KB; 2026-05-23 19:43:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 19:36:57, To:, 2026-05-23 19:43:54, Duration (s):, 417, Events Per Second:, 0.448, Events:, 187, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 186, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 25523 2026-05-23 19:43:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s683ms. 2026-05-23 19:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 258 KB; rules::ProcessConditionsCache: 219 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3926 KB; 2026-05-23 19:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 672 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 270 KB; rules::ProcessConditionsCache: 162 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3870 KB; 2026-05-23 19:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 19:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 274 KB; rules::ProcessConditionsCache: 165 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3887 KB; 2026-05-23 19:46:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 19:46:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 19:46:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 19:46:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 19:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 165 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3941 KB; 2026-05-23 19:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 165 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3917 KB; 2026-05-23 19:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 165 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3932 KB; 2026-05-23 19:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 349 KB; rules::ProcessConditionsCache: 217 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 55 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4084 KB; 2026-05-23 19:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 19:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:50:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 19:43:52, To:, 2026-05-23 19:50:54, Duration (s):, 422, Events Per Second:, 0.701, Events:, 296, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 295, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38062 2026-05-23 19:50:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s673ms. 2026-05-23 19:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 171 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3931 KB; 2026-05-23 19:51:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 19:51:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 19:51:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 19:51:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 19:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 101 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3966 KB; 2026-05-23 19:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 336 KB; rules::ProcessConditionsCache: 188 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4014 KB; 2026-05-23 19:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 106 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4044 KB; 2026-05-23 19:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 387 KB; rules::ProcessConditionsCache: 221 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 101 KB; cloudutils::CloudData: 55 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4134 KB; 2026-05-23 19:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 19:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 19:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 412 KB; rules::ProcessConditionsCache: 188 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 112 KB; cloudutils::CloudData: 55 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4148 KB; 2026-05-23 19:56:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 19:56:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 19:56:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 19:56:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 19:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 434 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 104 KB; cloudutils::CloudData: 55 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4206 KB; 2026-05-23 19:57:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 19:51:03, To:, 2026-05-23 19:57:54, Duration (s):, 411, Events Per Second:, 1.077, Events:, 443, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 442, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53295 2026-05-23 19:57:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s204ms. 2026-05-23 19:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 223 KB; ModuleInfoCache: 141 KB; TcpIpConnectionsManager: 127 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4062 KB; 2026-05-23 19:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 177 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3976 KB; 2026-05-23 19:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 352 KB; rules::ProcessConditionsCache: 209 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4052 KB; 2026-05-23 20:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 20:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 374 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4065 KB; 2026-05-23 20:01:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 20:01:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 20:01:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 20:01:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 20:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 668 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 378 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 53 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4054 KB; 2026-05-23 20:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 669 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 378 KB; rules::ProcessConditionsCache: 198 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 42 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 4039 KB; 2026-05-23 20:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 387 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 40 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4057 KB; 2026-05-23 20:04:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 19:57:54, To:, 2026-05-23 20:04:54, Duration (s):, 420, Events Per Second:, 0.521, Events:, 219, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 218, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32146 2026-05-23 20:04:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s678ms. 2026-05-23 20:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 672 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 267 KB; rules::ProcessConditionsCache: 232 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 63 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3945 KB; 2026-05-23 20:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 20:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 202 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 3920 KB; 2026-05-23 20:06:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 20:06:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 20:06:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 20:06:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 20:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 202 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3922 KB; 2026-05-23 20:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 274 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4082 KB; 2026-05-23 20:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 320 KB; rules::ProcessConditionsCache: 206 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4011 KB; 2026-05-23 20:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 698 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 370 KB; rules::ProcessConditionsCache: 208 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 55 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4115 KB; 2026-05-23 20:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 20:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 700 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 374 KB; rules::ProcessConditionsCache: 211 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 55 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4124 KB; 2026-05-23 20:11:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 20:11:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 20:11:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 20:11:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 20:11:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 20:04:54, To:, 2026-05-23 20:11:54, Duration (s):, 420, Events Per Second:, 0.726, Events:, 305, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 304, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39233 2026-05-23 20:11:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s224ms. 2026-05-23 20:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 688 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 209 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3939 KB; 2026-05-23 20:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 689 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 211 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 27 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3947 KB; 2026-05-23 20:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 768 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 309 KB; rules::ProcessConditionsCache: 211 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4061 KB; 2026-05-23 20:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 750 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 309 KB; rules::ProcessConditionsCache: 211 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4046 KB; 2026-05-23 20:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 20:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 712 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 217 KB; ModuleInfoCache: 141 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4075 KB; 2026-05-23 20:16:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 20:16:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 20:16:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 20:16:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 20:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 714 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 213 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4060 KB; 2026-05-23 20:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 696 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 351 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4071 KB; 2026-05-23 20:18:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 20:12:14, To:, 2026-05-23 20:18:54, Duration (s):, 400, Events Per Second:, 0.422, Events:, 169, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 168, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21818 2026-05-23 20:18:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s757ms. 2026-05-23 20:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 697 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 249 KB; rules::ProcessConditionsCache: 213 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3910 KB; 2026-05-23 20:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 698 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 249 KB; rules::ProcessConditionsCache: 213 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3914 KB; 2026-05-23 20:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 20:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 698 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 255 KB; rules::ProcessConditionsCache: 220 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; TcpIpConnectionsManager: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 3919 KB; 2026-05-23 20:21:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 20:21:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 20:21:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 20:21:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 20:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 277 KB; rules::ProcessConditionsCache: 222 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3933 KB; 2026-05-23 20:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 785 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 277 KB; rules::ProcessConditionsCache: 222 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4055 KB; 2026-05-23 20:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 824 KB; ModuleMetadata: 809 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 277 KB; rules::ProcessConditionsCache: 220 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4097 KB; 2026-05-23 20:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 826 KB; ModuleMetadata: 809 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 222 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 25 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4088 KB; 2026-05-23 20:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 20:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:25:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 20:20:12, To:, 2026-05-23 20:25:54, Duration (s):, 342, Events Per Second:, 0.251, Events:, 86, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 85, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12209 2026-05-23 20:25:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s669ms. 2026-05-23 20:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 827 KB; ModuleMetadata: 809 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 237 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4040 KB; 2026-05-23 20:26:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 20:26:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 20:26:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 20:26:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 20:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 809 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 239 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; TcpIpConnectionsManager: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4022 KB; 2026-05-23 20:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 733 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 267 KB; rules::ProcessConditionsCache: 238 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4021 KB; 2026-05-23 20:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 265 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4075 KB; 2026-05-23 20:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 106 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 4050 KB; 2026-05-23 20:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 20:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 234 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4054 KB; 2026-05-23 20:31:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 20:31:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 20:31:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 20:31:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 20:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 665 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 234 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 53 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4028 KB; 2026-05-23 20:32:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 20:26:23, To:, 2026-05-23 20:32:54, Duration (s):, 391, Events Per Second:, 0.606, Events:, 237, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 236, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29857 2026-05-23 20:32:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s962ms. 2026-05-23 20:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 666 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 245 KB; rules::ProcessConditionsCache: 233 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3892 KB; 2026-05-23 20:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 667 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 245 KB; rules::ProcessConditionsCache: 233 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 29 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3895 KB; 2026-05-23 20:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 302 KB; rules::ProcessConditionsCache: 272 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 30 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4021 KB; 2026-05-23 20:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 20:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 308 KB; rules::ProcessConditionsCache: 275 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4032 KB; 2026-05-23 20:36:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 20:36:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 20:36:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 20:36:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 20:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 340 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 86 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4224 KB; 2026-05-23 20:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 277 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 83 KB; cloudutils::CloudData: 56 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4146 KB; 2026-05-23 20:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 417 KB; rules::ProcessConditionsCache: 166 KB; TcpIpConnectionsManager: 147 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 5 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4208 KB; 2026-05-23 20:39:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 20:33:58, To:, 2026-05-23 20:39:54, Duration (s):, 356, Events Per Second:, 1.670, Events:, 595, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 593, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 79644 2026-05-23 20:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 690 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 424 KB; rules::ProcessConditionsCache: 342 KB; TcpIpConnectionsManager: 183 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 94 KB; BatchStringTag: 77 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 11 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; Total: 4526 KB; 2026-05-23 20:39:58 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s552ms. 2026-05-23 20:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 20:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 699 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 445 KB; rules::ProcessConditionsCache: 285 KB; TcpIpConnectionsManager: 168 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 103 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4425 KB; 2026-05-23 20:41:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 20:41:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 20:41:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 20:41:29 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 20:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 445 KB; TcpIpConnectionsManager: 155 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 68 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4102 KB; 2026-05-23 20:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 671 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 447 KB; TcpIpConnectionsManager: 152 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 66 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4096 KB; 2026-05-23 20:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 449 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 116 KB; rules::ProcessConditionsCache: 61 KB; cloudutils::CloudData: 56 KB; BaseEvent: 27 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4069 KB; 2026-05-23 20:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 452 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 63 KB; cloudutils::CloudData: 56 KB; BaseEvent: 35 KB; TcpIpConnectionsManager: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4013 KB; 2026-05-23 20:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 20:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 456 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 63 KB; cloudutils::CloudData: 56 KB; BaseEvent: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; TcpIpConnectionsManager: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4016 KB; 2026-05-23 20:46:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 20:46:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 20:46:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 20:46:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 20:46:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 20:39:25, To:, 2026-05-23 20:46:54, Duration (s):, 449, Events Per Second:, 0.521, Events:, 234, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 229, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 4, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39736 2026-05-23 20:46:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s278ms. 2026-05-23 20:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 678 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 249 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 69 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3761 KB; 2026-05-23 20:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 249 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; TcpIpConnectionsManager: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3765 KB; 2026-05-23 20:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 684 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 296 KB; rules::ProcessConditionsCache: 163 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3975 KB; 2026-05-23 20:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 685 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 306 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 95 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3914 KB; 2026-05-23 20:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 20:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 689 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 348 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 104 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 3983 KB; 2026-05-23 20:51:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 20:51:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 20:51:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 20:51:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 20:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 373 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 112 KB; rules::ProcessConditionsCache: 111 KB; cloudutils::CloudData: 56 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 4028 KB; 2026-05-23 20:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 693 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 389 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 107 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 56 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 4038 KB; 2026-05-23 20:53:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 20:47:04, To:, 2026-05-23 20:53:54, Duration (s):, 410, Events Per Second:, 0.916, Events:, 376, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 375, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46843 2026-05-23 20:53:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s893ms. 2026-05-23 20:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 695 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 284 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 107 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3874 KB; 2026-05-23 20:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 306 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 107 KB; TcpIpConnectionsManager: 76 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; BatchStringTag: 0 KB; Total: 3885 KB; 2026-05-23 20:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 20:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 20:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 311 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 107 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 3879 KB; 2026-05-23 20:56:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 20:56:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 20:56:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 20:56:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 20:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 334 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 107 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 3926 KB; 2026-05-23 20:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 334 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 107 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 3911 KB; 2026-05-23 20:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 361 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 111 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 56 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; BatchStringTag: 0 KB; Total: 3979 KB; 2026-05-23 20:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 685 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 370 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; rules::ProcessConditionsCache: 113 KB; TcpIpConnectionsManager: 63 KB; cloudutils::CloudData: 56 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; BatchStringTag: 0 KB; Total: 3986 KB; 2026-05-23 21:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 21:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:00:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 20:54:01, To:, 2026-05-23 21:00:54, Duration (s):, 413, Events Per Second:, 1.751, Events:, 724, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 721, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 84016 2026-05-23 21:00:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s476ms. 2026-05-23 21:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 809 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 686 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 470 KB; rules::ProcessConditionsCache: 208 KB; ModuleInfoCache: 142 KB; CacheEntry: 126 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4155 KB; 2026-05-23 21:01:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 21:01:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 21:01:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 21:01:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 21:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 470 KB; rules::ProcessConditionsCache: 208 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 4126 KB; 2026-05-23 21:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 475 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4137 KB; 2026-05-23 21:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 478 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 4144 KB; 2026-05-23 21:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 500 KB; rules::ProcessConditionsCache: 254 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 4245 KB; 2026-05-23 21:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 21:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 518 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 2 KB; BatchStringTag: 0 KB; Total: 4231 KB; 2026-05-23 21:06:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 21:06:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 21:06:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 21:06:30 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 21:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 679 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 524 KB; rules::ProcessConditionsCache: 213 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; TcpIpConnectionsManager: 76 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4239 KB; 2026-05-23 21:07:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 21:02:38, To:, 2026-05-23 21:07:54, Duration (s):, 316, Events Per Second:, 0.515, Events:, 163, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 162, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21852 2026-05-23 21:07:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s166ms. 2026-05-23 21:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 218 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3985 KB; 2026-05-23 21:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 683 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 293 KB; rules::ProcessConditionsCache: 214 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3957 KB; 2026-05-23 21:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 686 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 339 KB; rules::ProcessConditionsCache: 220 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4028 KB; 2026-05-23 21:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 21:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 690 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 351 KB; rules::ProcessConditionsCache: 229 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; cloudutils::CloudData: 55 KB; TcpIpConnectionsManager: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4060 KB; 2026-05-23 21:11:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 21:11:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 21:11:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 21:11:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 21:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 676 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 374 KB; rules::ProcessConditionsCache: 242 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; TcpIpConnectionsManager: 56 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4111 KB; 2026-05-23 21:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 674 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 384 KB; rules::ProcessConditionsCache: 260 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 55 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4158 KB; 2026-05-23 21:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 447 KB; ModuleInfoCache: 142 KB; TcpIpConnectionsManager: 135 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 82 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 6 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4161 KB; 2026-05-23 21:14:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 21:07:55, To:, 2026-05-23 21:14:54, Duration (s):, 419, Events Per Second:, 0.863, Events:, 362, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 361, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51263 2026-05-23 21:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 687 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 253 KB; ModuleInfoCache: 142 KB; TcpIpConnectionsManager: 135 KB; CacheEntry: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 87 KB; cloudutils::CloudData: 55 KB; BatchStringTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; Total: 4258 KB; 2026-05-23 21:14:59 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s475ms. 2026-05-23 21:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 21:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 691 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 348 KB; rules::ProcessConditionsCache: 288 KB; ModuleInfoCache: 142 KB; TcpIpConnectionsManager: 140 KB; CacheEntry: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 115 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4292 KB; 2026-05-23 21:16:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 21:16:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 21:16:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 21:16:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 21:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 696 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 376 KB; rules::ProcessConditionsCache: 315 KB; TcpIpConnectionsManager: 160 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 146 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4414 KB; 2026-05-23 21:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 698 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 381 KB; rules::ProcessConditionsCache: 328 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 166 KB; TcpIpConnectionsManager: 163 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4458 KB; 2026-05-23 21:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 696 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 408 KB; rules::ProcessConditionsCache: 192 KB; TcpIpConnectionsManager: 189 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 151 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4381 KB; 2026-05-23 21:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 694 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 428 KB; TcpIpConnectionsManager: 189 KB; rules::ProcessConditionsCache: 157 KB; ModuleInfoCache: 142 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 132 KB; CacheEntry: 127 KB; cloudutils::CloudData: 55 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4355 KB; 2026-05-23 21:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 21:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 691 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 434 KB; TcpIpConnectionsManager: 189 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 119 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 106 KB; cloudutils::CloudData: 55 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 13 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4298 KB; 2026-05-23 21:21:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 21:21:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 21:21:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 21:21:31 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 21:21:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 21:14:05, To:, 2026-05-23 21:21:54, Duration (s):, 469, Events Per Second:, 0.869, Events:, 408, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 407, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58727 2026-05-23 21:21:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s622ms. 2026-05-23 21:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 340 KB; ModuleInfoCache: 142 KB; TcpIpConnectionsManager: 134 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 90 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4074 KB; 2026-05-23 21:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 343 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 103 KB; TcpIpConnectionsManager: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 88 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 6 KB; BaseEvent: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 4027 KB; 2026-05-23 21:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 355 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 109 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 78 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4033 KB; 2026-05-23 21:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 685 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 370 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 118 KB; TcpIpConnectionsManager: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4060 KB; 2026-05-23 21:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 21:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 682 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 392 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 112 KB; TcpIpConnectionsManager: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4082 KB; 2026-05-23 21:26:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 21:26:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 21:26:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 21:26:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 21:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 687 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 440 KB; rules::ProcessConditionsCache: 206 KB; ModuleInfoCache: 142 KB; TcpIpConnectionsManager: 140 KB; CacheEntry: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 72 KB; cloudutils::CloudData: 55 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4291 KB; 2026-05-23 21:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 684 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 440 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; TcpIpConnectionsManager: 127 KB; rules::ProcessConditionsCache: 99 KB; cloudutils::CloudData: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4157 KB; 2026-05-23 21:28:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 21:22:00, To:, 2026-05-23 21:28:54, Duration (s):, 414, Events Per Second:, 0.702, Events:, 291, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 290, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36585 2026-05-23 21:28:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s696ms. 2026-05-23 21:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 688 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 314 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; TcpIpConnectionsManager: 109 KB; rules::ProcessConditionsCache: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3982 KB; 2026-05-23 21:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 708 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 317 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 97 KB; TcpIpConnectionsManager: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3978 KB; 2026-05-23 21:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 21:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 815 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 705 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 326 KB; ModuleInfoCache: 142 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 55 KB; cloudutils::CloudData: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3965 KB; 2026-05-23 21:31:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 21:31:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 21:31:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 21:31:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 21:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 692 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 326 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3959 KB; 2026-05-23 21:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 693 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 337 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 103 KB; TcpIpConnectionsManager: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3976 KB; 2026-05-23 21:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 695 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; TcpIpConnectionsManager: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4086 KB; 2026-05-23 21:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 675 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 362 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 108 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4012 KB; 2026-05-23 21:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 21:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:35:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 21:28:55, To:, 2026-05-23 21:35:54, Duration (s):, 419, Events Per Second:, 0.369, Events:, 155, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 154, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21486 2026-05-23 21:35:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s668ms. 2026-05-23 21:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 677 KB; rules::AncestorEvaluations: 561 KB; ProcessInfo: 283 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 113 KB; TcpIpConnectionsManager: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3911 KB; 2026-05-23 21:36:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 21:36:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 21:36:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 21:36:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 21:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 301 KB; rules::ProcessConditionsCache: 149 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 3858 KB; 2026-05-23 21:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 315 KB; ModuleInfoCache: 143 KB; rules::ProcessConditionsCache: 138 KB; CacheEntry: 127 KB; TcpIpConnectionsManager: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3865 KB; 2026-05-23 21:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 321 KB; ModuleInfoCache: 143 KB; rules::ProcessConditionsCache: 129 KB; CacheEntry: 127 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3874 KB; 2026-05-23 21:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 368 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 116 KB; TcpIpConnectionsManager: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3928 KB; 2026-05-23 21:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 21:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; ProcessInfo: 398 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 127 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3983 KB; 2026-05-23 21:41:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 21:41:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 21:41:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 21:41:32 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 21:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 414 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 123 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3993 KB; 2026-05-23 21:42:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 21:36:00, To:, 2026-05-23 21:42:54, Duration (s):, 414, Events Per Second:, 0.870, Events:, 361, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 360, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 45272 2026-05-23 21:42:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s894ms. 2026-05-23 21:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 296 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 123 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3812 KB; 2026-05-23 21:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 296 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 123 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3793 KB; 2026-05-23 21:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 296 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; rules::ProcessConditionsCache: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3787 KB; 2026-05-23 21:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 21:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 304 KB; ModuleInfoCache: 143 KB; rules::ProcessConditionsCache: 134 KB; CacheEntry: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3822 KB; 2026-05-23 21:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 304 KB; ModuleInfoCache: 143 KB; rules::ProcessConditionsCache: 134 KB; CacheEntry: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3822 KB; 2026-05-23 21:47:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 21:47:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 21:47:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 21:47:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 21:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 304 KB; ModuleInfoCache: 143 KB; rules::ProcessConditionsCache: 134 KB; CacheEntry: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3822 KB; 2026-05-23 21:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 304 KB; ModuleInfoCache: 143 KB; rules::ProcessConditionsCache: 134 KB; CacheEntry: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3819 KB; 2026-05-23 21:49:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 21:44:43, To:, 2026-05-23 21:49:54, Duration (s):, 311, Events Per Second:, 0.051, Events:, 16, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 15, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 3930 2026-05-23 21:49:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s884ms. 2026-05-23 21:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 251 KB; ModuleInfoCache: 143 KB; rules::ProcessConditionsCache: 133 KB; CacheEntry: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3758 KB; 2026-05-23 21:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 21:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 262 KB; rules::ProcessConditionsCache: 148 KB; ModuleInfoCache: 143 KB; CacheEntry: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3802 KB; 2026-05-23 21:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 283 KB; rules::ProcessConditionsCache: 152 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3875 KB; 2026-05-23 21:52:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 21:52:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 21:52:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 21:52:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 21:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 284 KB; rules::ProcessConditionsCache: 152 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 76 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3882 KB; 2026-05-23 21:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 284 KB; rules::ProcessConditionsCache: 152 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 79 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3887 KB; 2026-05-23 21:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 284 KB; rules::ProcessConditionsCache: 152 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 84 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3881 KB; 2026-05-23 21:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 21:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 21:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 161 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3872 KB; 2026-05-23 21:56:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 21:45:55, To:, 2026-05-23 21:56:54, Duration (s):, 659, Events Per Second:, 0.324, Events:, 214, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 213, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30372 2026-05-23 21:56:57 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s240ms. 2026-05-23 21:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 264 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 72 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4040 KB; 2026-05-23 21:57:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 21:57:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 21:57:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 21:57:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 21:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 120 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3944 KB; 2026-05-23 21:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 161 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3918 KB; 2026-05-23 21:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; ProcessInfo: 327 KB; rules::ProcessConditionsCache: 161 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3916 KB; 2026-05-23 22:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 22:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3953 KB; 2026-05-23 22:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3944 KB; 2026-05-23 22:02:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 22:02:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 22:02:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 22:02:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 22:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 368 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3965 KB; 2026-05-23 22:03:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 21:56:47, To:, 2026-05-23 22:03:54, Duration (s):, 427, Events Per Second:, 0.447, Events:, 191, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 185, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29900 2026-05-23 22:03:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s519ms. 2026-05-23 22:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 268 KB; rules::ProcessConditionsCache: 202 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3868 KB; 2026-05-23 22:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 188 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3881 KB; 2026-05-23 22:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 22:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 204 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3918 KB; 2026-05-23 22:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 188 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3902 KB; 2026-05-23 22:07:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 22:07:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 22:07:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 22:07:23 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 22:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3876 KB; 2026-05-23 22:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 186 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3875 KB; 2026-05-23 22:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 351 KB; rules::ProcessConditionsCache: 191 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 40 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3949 KB; 2026-05-23 22:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 22:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:10:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 22:03:54, To:, 2026-05-23 22:10:54, Duration (s):, 420, Events Per Second:, 0.723, Events:, 304, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 303, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38050 2026-05-23 22:10:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s736ms. 2026-05-23 22:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 199 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3914 KB; 2026-05-23 22:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 199 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3905 KB; 2026-05-23 22:12:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 22:12:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 22:12:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 22:12:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 22:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; TcpIpConnectionsManager: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 3911 KB; 2026-05-23 22:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3898 KB; 2026-05-23 22:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 194 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3896 KB; 2026-05-23 22:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 22:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 337 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3916 KB; 2026-05-23 22:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 339 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 144 KB; CacheEntry: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3915 KB; 2026-05-23 22:17:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 22:17:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 22:17:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 22:17:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 22:17:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 22:11:05, To:, 2026-05-23 22:17:54, Duration (s):, 409, Events Per Second:, 0.129, Events:, 53, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 50, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 8907 2026-05-23 22:17:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s735ms. 2026-05-23 22:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 262 KB; rules::ProcessConditionsCache: 203 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3837 KB; 2026-05-23 22:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 286 KB; rules::ProcessConditionsCache: 267 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 78 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3983 KB; 2026-05-23 22:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 286 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 68 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3872 KB; 2026-05-23 22:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 22:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 208 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3891 KB; 2026-05-23 22:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 269 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4007 KB; 2026-05-23 22:22:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 22:22:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 22:22:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 22:22:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 22:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 208 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3919 KB; 2026-05-23 22:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 208 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3925 KB; 2026-05-23 22:24:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 22:18:00, To:, 2026-05-23 22:24:54, Duration (s):, 414, Events Per Second:, 0.359, Events:, 149, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 148, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 19366 2026-05-23 22:24:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s701ms. 2026-05-23 22:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 273 KB; rules::ProcessConditionsCache: 207 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3855 KB; 2026-05-23 22:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 22:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 209 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3849 KB; 2026-05-23 22:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 211 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3885 KB; 2026-05-23 22:27:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 22:27:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 22:27:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 22:27:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 22:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 560 KB; ProcessInfo: 289 KB; rules::ProcessConditionsCache: 209 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3888 KB; 2026-05-23 22:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 323 KB; rules::ProcessConditionsCache: 268 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4005 KB; 2026-05-23 22:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 207 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3933 KB; 2026-05-23 22:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 22:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 333 KB; rules::ProcessConditionsCache: 218 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 79 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3966 KB; 2026-05-23 22:31:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 22:25:01, To:, 2026-05-23 22:31:54, Duration (s):, 413, Events Per Second:, 0.408, Events:, 169, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 168, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22538 2026-05-23 22:31:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s671ms. 2026-05-23 22:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 287 KB; rules::ProcessConditionsCache: 221 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3884 KB; 2026-05-23 22:32:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 22:32:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 22:32:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 22:32:24 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 22:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 370 KB; rules::ProcessConditionsCache: 258 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4022 KB; 2026-05-23 22:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 415 KB; rules::ProcessConditionsCache: 278 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4144 KB; 2026-05-23 22:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 417 KB; rules::ProcessConditionsCache: 265 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4132 KB; 2026-05-23 22:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 22:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 421 KB; rules::ProcessConditionsCache: 261 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 78 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4135 KB; 2026-05-23 22:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 421 KB; rules::ProcessConditionsCache: 261 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 50 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4116 KB; 2026-05-23 22:37:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 22:37:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 22:37:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 22:37:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 22:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 423 KB; rules::ProcessConditionsCache: 261 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 56 KB; BaseEvent: 46 KB; TcpIpConnectionsManager: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4115 KB; 2026-05-23 22:38:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 22:32:01, To:, 2026-05-23 22:38:54, Duration (s):, 413, Events Per Second:, 1.121, Events:, 464, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 455, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 2, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57618 2026-05-23 22:38:57 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s246ms. 2026-05-23 22:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::ProcessConditionsCache: 328 KB; ProcessInfo: 308 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4061 KB; 2026-05-23 22:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 371 KB; rules::ProcessConditionsCache: 264 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 101 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4087 KB; 2026-05-23 22:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 22:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 458 KB; rules::ProcessConditionsCache: 312 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 56 KB; BaseEvent: 36 KB; ProcessInfoCommandLineTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4270 KB; 2026-05-23 22:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 458 KB; rules::ProcessConditionsCache: 312 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 56 KB; BaseEvent: 40 KB; ProcessInfoCommandLineTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4234 KB; 2026-05-23 22:42:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 22:42:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 22:42:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 22:42:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 22:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 458 KB; rules::ProcessConditionsCache: 312 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 43 KB; BaseEvent: 43 KB; ProcessInfoCommandLineTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4220 KB; 2026-05-23 22:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 458 KB; rules::ProcessConditionsCache: 312 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; cloudutils::CloudData: 56 KB; BaseEvent: 44 KB; TcpIpConnectionsManager: 40 KB; ProcessInfoCommandLineTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4222 KB; 2026-05-23 22:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 462 KB; rules::ProcessConditionsCache: 314 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 76 KB; cloudutils::CloudData: 56 KB; BaseEvent: 45 KB; TcpIpConnectionsManager: 42 KB; ProcessInfoCommandLineTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4241 KB; 2026-05-23 22:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 22:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:45:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 22:38:54, To:, 2026-05-23 22:45:54, Duration (s):, 420, Events Per Second:, 1.096, Events:, 461, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 438, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 11, Livegrid:, 11, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 60360 2026-05-23 22:45:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s115ms. 2026-05-23 22:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 262 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 76 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3958 KB; 2026-05-23 22:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::ProcessConditionsCache: 389 KB; ProcessInfo: 290 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 85 KB; TcpIpConnectionsManager: 70 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4103 KB; 2026-05-23 22:47:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 22:47:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 22:47:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 22:47:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 22:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 290 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4009 KB; 2026-05-23 22:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::ProcessConditionsCache: 314 KB; ProcessInfo: 293 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4010 KB; 2026-05-23 22:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::ProcessConditionsCache: 312 KB; ProcessInfo: 293 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4014 KB; 2026-05-23 22:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 22:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::ProcessConditionsCache: 319 KB; ProcessInfo: 299 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4015 KB; 2026-05-23 22:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; rules::ProcessConditionsCache: 356 KB; ProcessInfo: 333 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4105 KB; 2026-05-23 22:52:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 22:52:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 22:52:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 22:52:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 22:52:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 22:45:55, To:, 2026-05-23 22:52:54, Duration (s):, 419, Events Per Second:, 0.627, Events:, 263, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 261, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33895 2026-05-23 22:52:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s727ms. 2026-05-23 22:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; rules::ProcessConditionsCache: 328 KB; ProcessInfo: 308 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 104 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 4043 KB; 2026-05-23 22:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 329 KB; rules::ProcessConditionsCache: 319 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 127 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4083 KB; 2026-05-23 22:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 376 KB; rules::ProcessConditionsCache: 363 KB; TcpIpConnectionsManager: 153 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4227 KB; 2026-05-23 22:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 22:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 22:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 383 KB; rules::ProcessConditionsCache: 324 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 120 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4165 KB; 2026-05-23 22:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 406 KB; rules::ProcessConditionsCache: 385 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 56 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4278 KB; 2026-05-23 22:57:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 22:57:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 22:57:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 22:57:25 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 22:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 409 KB; rules::ProcessConditionsCache: 324 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 89 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4185 KB; 2026-05-23 22:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 415 KB; rules::ProcessConditionsCache: 321 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4179 KB; 2026-05-23 22:59:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 22:52:55, To:, 2026-05-23 22:59:54, Duration (s):, 419, Events Per Second:, 0.731, Events:, 307, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 306, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37028 2026-05-23 22:59:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s493ms. 2026-05-23 22:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; rules::ProcessConditionsCache: 321 KB; ProcessInfo: 279 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 73 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3988 KB; 2026-05-23 23:00:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:00:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 23:00:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:00:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:00:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::ProcessConditionsCache: 341 KB; ProcessInfo: 299 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4023 KB; 2026-05-23 23:01:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::ProcessConditionsCache: 341 KB; ProcessInfo: 299 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4009 KB; 2026-05-23 23:02:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 23:02:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 23:02:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 23:02:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 23:02:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::ProcessConditionsCache: 346 KB; ProcessInfo: 305 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4025 KB; 2026-05-23 23:03:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::ProcessConditionsCache: 343 KB; ProcessInfo: 312 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4038 KB; 2026-05-23 23:04:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; rules::ProcessConditionsCache: 343 KB; ProcessInfo: 312 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4044 KB; 2026-05-23 23:05:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:05:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 23:05:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:05:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:05:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::ProcessConditionsCache: 343 KB; ProcessInfo: 315 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 4053 KB; 2026-05-23 23:06:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 23:00:01, To:, 2026-05-23 23:06:54, Duration (s):, 413, Events Per Second:, 0.416, Events:, 172, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 171, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23948 2026-05-23 23:06:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s416ms. 2026-05-23 23:06:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 283 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; rules::ProcessConditionsCache: 63 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3755 KB; 2026-05-23 23:07:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 23:07:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 23:07:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 23:07:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 23:07:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 308 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 106 KB; rules::ProcessConditionsCache: 63 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3795 KB; 2026-05-23 23:08:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 309 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 106 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3769 KB; 2026-05-23 23:09:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 393 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 117 KB; rules::ProcessConditionsCache: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3997 KB; 2026-05-23 23:10:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:10:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 23:10:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:10:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:10:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 399 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 93 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::ProcessConditionsCache: 52 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3914 KB; 2026-05-23 23:11:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 405 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 88 KB; cloudutils::CloudData: 56 KB; rules::ProcessConditionsCache: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3907 KB; 2026-05-23 23:12:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 23:12:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 23:12:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 23:12:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 23:12:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 428 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 96 KB; cloudutils::CloudData: 56 KB; rules::ProcessConditionsCache: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3943 KB; 2026-05-23 23:13:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 23:06:55, To:, 2026-05-23 23:13:54, Duration (s):, 419, Events Per Second:, 0.991, Events:, 416, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 415, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51663 2026-05-23 23:13:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s895ms. 2026-05-23 23:13:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 277 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 76 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::ProcessConditionsCache: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3712 KB; 2026-05-23 23:14:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 286 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 76 KB; cloudutils::CloudData: 56 KB; rules::ProcessConditionsCache: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3726 KB; 2026-05-23 23:15:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:15:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 23:15:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:15:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:15:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 315 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 79 KB; rules::ProcessConditionsCache: 61 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3779 KB; 2026-05-23 23:16:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 340 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 56 KB; rules::ProcessConditionsCache: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3827 KB; 2026-05-23 23:17:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 23:17:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 23:17:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 23:17:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 23:17:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 345 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 94 KB; rules::ProcessConditionsCache: 57 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3834 KB; 2026-05-23 23:18:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 345 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 70 KB; rules::ProcessConditionsCache: 57 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3816 KB; 2026-05-23 23:19:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 396 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; rules::ProcessConditionsCache: 107 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3961 KB; 2026-05-23 23:20:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:20:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 23:20:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:20:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:20:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 23:13:54, To:, 2026-05-23 23:20:54, Duration (s):, 420, Events Per Second:, 0.863, Events:, 363, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 362, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44260 2026-05-23 23:20:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s882ms. 2026-05-23 23:20:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 311 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3796 KB; 2026-05-23 23:21:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 311 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 106 KB; rules::ProcessConditionsCache: 65 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3782 KB; 2026-05-23 23:22:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 23:22:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 23:22:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 23:22:26 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 23:22:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 311 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; TcpIpConnectionsManager: 73 KB; rules::ProcessConditionsCache: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 3 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3771 KB; 2026-05-23 23:23:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 323 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; rules::ProcessConditionsCache: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3767 KB; 2026-05-23 23:24:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 323 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; rules::ProcessConditionsCache: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3771 KB; 2026-05-23 23:25:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:25:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 23:25:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:25:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:25:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 326 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; rules::ProcessConditionsCache: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3775 KB; 2026-05-23 23:26:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 327 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; rules::ProcessConditionsCache: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3773 KB; 2026-05-23 23:27:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 23:27:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 23:27:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 23:27:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 23:27:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 23:21:03, To:, 2026-05-23 23:27:54, Duration (s):, 411, Events Per Second:, 0.117, Events:, 48, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 47, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 7603 2026-05-23 23:27:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s016ms. 2026-05-23 23:27:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 248 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; rules::ProcessConditionsCache: 65 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3675 KB; 2026-05-23 23:28:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 249 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3683 KB; 2026-05-23 23:29:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 251 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; rules::ProcessConditionsCache: 65 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3681 KB; 2026-05-23 23:30:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:30:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 23:30:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:30:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:30:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 817 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 264 KB; ModuleInfoCache: 144 KB; CacheEntry: 130 KB; rules::ProcessConditionsCache: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3732 KB; 2026-05-23 23:31:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 312 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3929 KB; 2026-05-23 23:32:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 23:32:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 23:32:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 23:32:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 23:32:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 312 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; TcpIpConnectionsManager: 96 KB; rules::ProcessConditionsCache: 78 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3817 KB; 2026-05-23 23:33:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 314 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; TcpIpConnectionsManager: 96 KB; rules::ProcessConditionsCache: 80 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3828 KB; 2026-05-23 23:34:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 23:28:26, To:, 2026-05-23 23:34:54, Duration (s):, 388, Events Per Second:, 0.491, Events:, 191, File:, 7, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 175, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 8, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24343 2026-05-23 23:34:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s678ms. 2026-05-23 23:34:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 277 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 79 KB; TcpIpConnectionsManager: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3742 KB; 2026-05-23 23:35:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:35:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 23:35:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:35:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:35:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 304 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 86 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3772 KB; 2026-05-23 23:36:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 305 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 81 KB; TcpIpConnectionsManager: 63 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3776 KB; 2026-05-23 23:37:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 23:37:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 23:37:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 23:37:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 23:37:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 317 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 92 KB; TcpIpConnectionsManager: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3818 KB; 2026-05-23 23:38:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 317 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3791 KB; 2026-05-23 23:39:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 361 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 50 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3866 KB; 2026-05-23 23:40:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:40:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 23:40:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:40:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:40:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 365 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 42 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3877 KB; 2026-05-23 23:41:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 23:35:01, To:, 2026-05-23 23:41:54, Duration (s):, 413, Events Per Second:, 0.592, Events:, 245, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 244, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 31046 2026-05-23 23:41:55 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s689ms. 2026-05-23 23:41:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 296 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3755 KB; 2026-05-23 23:42:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 23:42:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 23:42:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 23:42:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 23:42:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 296 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3761 KB; 2026-05-23 23:43:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 298 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3768 KB; 2026-05-23 23:44:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 321 KB; rules::ProcessConditionsCache: 144 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 77 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3874 KB; 2026-05-23 23:45:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:45:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 23:45:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:45:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:45:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 324 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 96 KB; TcpIpConnectionsManager: 63 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3812 KB; 2026-05-23 23:46:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 324 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 96 KB; TcpIpConnectionsManager: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3818 KB; 2026-05-23 23:47:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 23:47:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 23:47:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 23:47:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 23:47:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 326 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 58 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3821 KB; 2026-05-23 23:48:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 23:41:54, To:, 2026-05-23 23:48:54, Duration (s):, 420, Events Per Second:, 0.273, Events:, 115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 114, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 15814 2026-05-23 23:48:56 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s910ms. 2026-05-23 23:48:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 257 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3730 KB; 2026-05-23 23:49:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 257 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3734 KB; 2026-05-23 23:50:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:50:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 23:50:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:50:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:50:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 261 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3747 KB; 2026-05-23 23:51:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 261 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3729 KB; 2026-05-23 23:52:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 23:52:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 23:52:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 23:52:27 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 23:52:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 264 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; cloudutils::CloudData: 56 KB; TcpIpConnectionsManager: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 3735 KB; 2026-05-23 23:53:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 217 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; TcpIpConnectionsManager: 91 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 85 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3975 KB; 2026-05-23 23:54:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 321 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 129 KB; TcpIpConnectionsManager: 104 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; cloudutils::CloudData: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3899 KB; 2026-05-23 23:55:36 75ed56ffe6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:55:36 75ed56ffe6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 118, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 2026-05-23 23:55:36 75ed56ffe6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:55:36 75ed56ffe6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false) 2026-05-23 23:55:54 75ed6dee26c0 Info: Events Statistics, From:, 2026-05-23 23:49:05, To:, 2026-05-23 23:55:54, Duration (s):, 409, Events Per Second:, 0.451, Events:, 185, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 184, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23452 2026-05-23 23:55:57 75ed6e6e36c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s239ms. 2026-05-23 23:55:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 305 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 103 KB; TcpIpConnectionsManager: 102 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3818 KB; 2026-05-23 23:56:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 561 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 305 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 103 KB; TcpIpConnectionsManager: 91 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 3812 KB; 2026-05-23 23:57:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. Start 2026-05-23 23:57:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. conditions size: 23894 2026-05-23 23:57:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. providers size: 37 2026-05-23 23:57:28 75ed6cbff6c0 Info: RulesEngineMemoryUsage. End 2026-05-23 23:57:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 339 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 110 KB; TcpIpConnectionsManager: 84 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3863 KB; 2026-05-23 23:58:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 339 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 105 KB; TcpIpConnectionsManager: 75 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3853 KB; 2026-05-23 23:59:57 75ed55ffc6c0 Info: Allocations: rules::RuleEvaluationCtx: 964 KB; ModuleMetadata: 818 KB; rules::AncestorEvaluations: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 351 KB; ModuleInfoCache: 144 KB; CacheEntry: 131 KB; rules::ProcessConditionsCache: 108 KB; TcpIpConnectionsManager: 81 KB; cloudutils::CloudData: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 1 KB; BatchStringTag: 0 KB; Total: 3877 KB;